feat(code): integrate Hooks v2 client lifecycle events by johannes117 · Pull Request #5104 · langchain-ai/deepagents

Johannes du Plessis (johannes117) · 2026-07-27T23:28:59Z

Supersedes #5010 (auto-closed when #4997 squash-merged; GitHub seals force-pushed closed PRs).
Related: DCD-71

dcode now runs client-owned Hooks v2 lifecycle events consistently in interactive and headless sessions, including hook-driven approval decisions before permission prompts are shown.

Invokes SessionStart and SessionEnd at startup, resume, clear, compact, switch, and exit boundaries.
Applies PermissionRequest allow, deny, ask, interrupt, notice, terminal, and stop effects before client approval resolution.
Routes supported dcode notifications through one typed service with explicit wire mappings while avoiding migrated legacy duplicates.
Preserves session-start context for the next model turn and adds TUI/headless decision-parity coverage.
Ignores generated local transcript state through .gitignore.

This branch was re-anchored onto main after #4997 squash-merged; the diff is identical to the approved #5010 head (f4e8ee672), minus a stale resurrection of todo_list_prompt.md that #5098 deleted on main.

Review Guide

hooks/client_lifecycle.py — ClientHookService, context, permission outcomes
app.py — SessionStart/End boundaries + service wiring
tui/textual_adapter.py, client/non_interactive.py — interactive vs headless parity
Skim: transcript.py, server_middleware.py (PermissionRequest), runtime.py / projection.py
Tests: test_client_lifecycle.py, then adapter / non-interactive / server-lifecycle deltas

Test plan

266 hooks unit tests pass on the rebuilt tip
412 non-interactive / Textual adapter / status widget tests pass

main
- feat(code): integrate Hooks v2 client lifecycle events 👈
  - feat(code): add project hooks workspace trust #5105
    - feat(code): surface Hooks v2 runtime feedback #5045

^{Stack generated by Git Town}

open-swe

Open SWE Review found 3 potential issues.

Open in Web • View Open SWE trace

Alexander Olsen (aolsenjazz)

Please take a look at app.py and lmk what you think. Left a number of comments re. composition + ownership

Alexander Olsen (aolsenjazz)

one more callout I should make here: the way the system is designed, everything is super defensive. I don't see a world where a client hooks service is ever None. Imo it doesn't matter if init fails + the service is unusable; consumers of the hooks system shouldn't ever need to do a defined-check on a service

dcode now runs client-owned Hooks v2 lifecycle events consistently in interactive and headless sessions, including hook-driven approval decisions before permission prompts are shown. Re-anchored onto main after #4997 squash-merged; this commit carries the full PR #5010 delta.

Require the `compact_conversation` tool name (not just the content prefix) before firing the compact SessionStart lifecycle in the headless, TUI, and resume paths, so ordinary tool output echoing "Conversation compacted." can't trigger a false compaction boundary. Serialize transcript materialization across processes with an advisory file lock and merge on-disk records into the buffer before rewriting, so two dcode processes resuming the same thread no longer silently drop each other's streamed records. Restore the required-empty-answer warning toast in `ask_user` that the rebase dropped, so blocked submits give feedback again.

Client-side Hooks v2 had no owner: the runtime, hook service, transcript, and session identity were assembled by hand at every consumer, so each one also had to answer whether hooks were available at all. `HooksManager` now owns all four and exposes lifecycle intent instead of plumbing. A manager whose config failed to load stays usable and answers neutrally, removing the availability checks rather than relocating them. Permission resolution moves into `hooks/permissions.py` so the Textual adapter and the headless runner share one `PermissionPlan`. Co-authored-by: Cursor <cursoragent@cursor.com>

Alexander Olsen (aolsenjazz)

we ball

Supersedes #5044 (auto-closed when #4997 squash-merged; GitHub seals force-pushed closed PRs). Project-level hooks now require an explicit workspace trust decision before their commands run. Interactive users can allow once, remember the workspace, or skip project hooks; headless runs remain opt-in through `--trust-project-hooks`. --- This closes the execution gap that left interactive project hooks permanently disabled while preserving fail-closed behavior. Trust is keyed to the canonical repository root, saved atomically, and enforced again at runtime if a snapshot is ever constructed inconsistently. `config path` and the threat model now expose the relevant project, user, and trust locations. Re-anchored onto `main` after #5104 squash-merged, so the PR diff contains only this branch's commits. ## Review Guide 1. `hooks/trust.py` — store, keys, atomic write, trust APIs 2. `hooks/loading.py` — project source ingest vs skip 3. `hooks/runtime.py` — fail-closed runtime guard 4. `main.py` — `--trust-project-hooks` + interactive prompt 5. Skim: `app.py`, `client/commands/config.py`, `THREAT_MODEL.md` 6. Tests: `test_trust.py`, then config/app/main touches <details> <summary>Test plan</summary> - Full hooks suite passes on the rebuilt stack tip. `test_trust.py` keeps one case per regressable behavior: canonical persistence, fail-closed corrupt-store handling, project-source provenance, the runtime trust guard, the three prompt outcomes, prompt suppression on persisted trust, and Textual wiring. </details>  ------------------------- - main - **feat(code): add project hooks workspace trust** 👈 - #5045 [Stack](https://www.git-town.com/how-to/proposal-breadcrumb.html) generated by [Git Town](https://github.com/git-town/git-town)  --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

…5104) Supersedes langchain-ai#5010 (auto-closed when langchain-ai#4997 squash-merged; GitHub seals force-pushed closed PRs). Related: [DCD-71](https://linear.app/langchain/issue/DCD-71/hooks-v2-integrate-client-owned-lifecycle-events) dcode now runs client-owned Hooks v2 lifecycle events consistently in interactive and headless sessions, including hook-driven approval decisions before permission prompts are shown. --- - Invokes `SessionStart` and `SessionEnd` at startup, resume, clear, compact, switch, and exit boundaries. - Applies `PermissionRequest` allow, deny, ask, interrupt, notice, terminal, and stop effects before client approval resolution. - Routes supported dcode notifications through one typed service with explicit wire mappings while avoiding migrated legacy duplicates. - Preserves session-start context for the next model turn and adds TUI/headless decision-parity coverage. - Ignores generated local transcript state through `.gitignore`. This branch was re-anchored onto `main` after langchain-ai#4997 squash-merged; the diff is identical to the approved langchain-ai#5010 head (`f4e8ee672`), minus a stale resurrection of `todo_list_prompt.md` that langchain-ai#5098 deleted on main. ## Review Guide 1. `hooks/client_lifecycle.py` — `ClientHookService`, context, permission outcomes 2. `app.py` — SessionStart/End boundaries + service wiring 3. `tui/textual_adapter.py`, `client/non_interactive.py` — interactive vs headless parity 4. Skim: `transcript.py`, `server_middleware.py` (PermissionRequest), `runtime.py` / `projection.py` 5. Tests: `test_client_lifecycle.py`, then adapter / non-interactive / server-lifecycle deltas <details> <summary>Test plan</summary> - 266 hooks unit tests pass on the rebuilt tip - 412 non-interactive / Textual adapter / status widget tests pass </details>  ------------------------- - main - **feat(code): integrate Hooks v2 client lifecycle events** :point_left: - langchain-ai#5105 - langchain-ai#5045 [Stack](https://www.git-town.com/how-to/proposal-breadcrumb.html) generated by [Git Town](https://github.com/git-town/git-town)  --------- Co-authored-by: Cursor <cursoragent@cursor.com>

Supersedes langchain-ai#5044 (auto-closed when langchain-ai#4997 squash-merged; GitHub seals force-pushed closed PRs). Project-level hooks now require an explicit workspace trust decision before their commands run. Interactive users can allow once, remember the workspace, or skip project hooks; headless runs remain opt-in through `--trust-project-hooks`. --- This closes the execution gap that left interactive project hooks permanently disabled while preserving fail-closed behavior. Trust is keyed to the canonical repository root, saved atomically, and enforced again at runtime if a snapshot is ever constructed inconsistently. `config path` and the threat model now expose the relevant project, user, and trust locations. Re-anchored onto `main` after langchain-ai#5104 squash-merged, so the PR diff contains only this branch's commits. ## Review Guide 1. `hooks/trust.py` — store, keys, atomic write, trust APIs 2. `hooks/loading.py` — project source ingest vs skip 3. `hooks/runtime.py` — fail-closed runtime guard 4. `main.py` — `--trust-project-hooks` + interactive prompt 5. Skim: `app.py`, `client/commands/config.py`, `THREAT_MODEL.md` 6. Tests: `test_trust.py`, then config/app/main touches <details> <summary>Test plan</summary> - Full hooks suite passes on the rebuilt stack tip. `test_trust.py` keeps one case per regressable behavior: canonical persistence, fail-closed corrupt-store handling, project-source provenance, the runtime trust guard, the three prompt outcomes, prompt suppression on persisted trust, and Textual wiring. </details>  ------------------------- - main - **feat(code): add project hooks workspace trust** 👈 - langchain-ai#5045 [Stack](https://www.git-town.com/how-to/proposal-breadcrumb.html) generated by [Git Town](https://github.com/git-town/git-town)  --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

> [!CAUTION] > Merging this PR will automatically publish to **PyPI** and create a **GitHub release**. For the full release process, see [`.github/RELEASING.md`](https://github.com/langchain-ai/deepagents/blob/main/.github/RELEASING.md). --- _Release notes preview: keep this section in sync with the package `CHANGELOG.md`. Publish reads the merged CHANGELOG via `release.yml`, not this PR description — keep them aligned anyway so the PR stays an accurate historical record for reviewers and anyone returning later._ --- ## [0.1.50](deepagents-code==0.1.49...deepagents-code==0.1.50) (2026-07-30) ### Highlights - Added project hooks workspace trust and expanded Hooks v2 support with client and server lifecycle events plus runtime feedback ([#5105](#5105), [#5104](#5104), [#4997](#4997), [#5045](#5045)). - Added an option to mute the “YOLO is active” toast ([#5103](#5103)). - Made the splash screen `thread` ID clickable to copy it ([#5173](#5173)). - Show `ask_user` answers directly on the answered tool row ([#5100](#5100)). - Show a toast when submitting an empty required `ask_user` answer ([#5095](#5095)). - Added thread message counts to the Debug Console ([#5117](#5117)). ### Fixes and improvements - Gated Hooks v2 behind `DEEPAGENTS_CODE_EXPERIMENTAL` and improved hook resume stability across identity and Command tool results ([#5146](#5146), [#5176](#5176)). - Kept server hook state out of task results ([#5164](#5164)). - Stopped duplicate Auto transcript events during interrupt replay ([#5157](#5157)). - Kept `/update` and `/install --package` prompts responsive ([#5127](#5127)). - Refreshed the `/threads` cache after each turn ([#5174](#5174)). - Anchored toasts above the chat input and added a toast when media is dropped into a free-text question ([#5101](#5101), [#5099](#5099)). - Improved thread status message styling and links ([#5118](#5118)). - Made resume hints echo the launched command name ([#5119](#5119)). - Scoped selection copy to the clicked screen ([#5140](#5140)). - Ignored mouse hits on detached widgets ([#5114](#5114)). _End release notes preview._ --- > [!NOTE] > A **New Contributors** section is appended to the GitHub release notes automatically at publish time (see [Release Pipeline](https://github.com/langchain-ai/deepagents/blob/main/.github/RELEASING.md#release-pipeline), step 2). --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: langchain-oss-automated-triage[bot] <248757908+langchain-oss-automated-triage[bot]@users.noreply.github.com> Co-authored-by: Johannes du Plessis <johannes@langchain.dev>

Supersedes #5010 (auto-closed when #4997 squash-merged; GitHub seals force-pushed closed PRs). Related: [DCD-71](https://linear.app/langchain/issue/DCD-71/hooks-v2-integrate-client-owned-lifecycle-events) dcode now runs client-owned Hooks v2 lifecycle events consistently in interactive and headless sessions, including hook-driven approval decisions before permission prompts are shown. --- - Invokes `SessionStart` and `SessionEnd` at startup, resume, clear, compact, switch, and exit boundaries. - Applies `PermissionRequest` allow, deny, ask, interrupt, notice, terminal, and stop effects before client approval resolution. - Routes supported dcode notifications through one typed service with explicit wire mappings while avoiding migrated legacy duplicates. - Preserves session-start context for the next model turn and adds TUI/headless decision-parity coverage. - Ignores generated local transcript state through `.gitignore`. This branch was re-anchored onto `main` after #4997 squash-merged; the diff is identical to the approved #5010 head (`f4e8ee672`), minus a stale resurrection of `todo_list_prompt.md` that #5098 deleted on main. 1. `hooks/client_lifecycle.py` — `ClientHookService`, context, permission outcomes 2. `app.py` — SessionStart/End boundaries + service wiring 3. `tui/textual_adapter.py`, `client/non_interactive.py` — interactive vs headless parity 4. Skim: `transcript.py`, `server_middleware.py` (PermissionRequest), `runtime.py` / `projection.py` 5. Tests: `test_client_lifecycle.py`, then adapter / non-interactive / server-lifecycle deltas <details> <summary>Test plan</summary> - 266 hooks unit tests pass on the rebuilt tip - 412 non-interactive / Textual adapter / status widget tests pass </details>  ------------------------- - main - **feat(code): integrate Hooks v2 client lifecycle events** :point_left: - #5105 - #5045 [Stack](https://www.git-town.com/how-to/proposal-breadcrumb.html) generated by [Git Town](https://github.com/git-town/git-town)  --------- Co-authored-by: Cursor <cursoragent@cursor.com>

Supersedes #5044 (auto-closed when #4997 squash-merged; GitHub seals force-pushed closed PRs). Project-level hooks now require an explicit workspace trust decision before their commands run. Interactive users can allow once, remember the workspace, or skip project hooks; headless runs remain opt-in through `--trust-project-hooks`. --- This closes the execution gap that left interactive project hooks permanently disabled while preserving fail-closed behavior. Trust is keyed to the canonical repository root, saved atomically, and enforced again at runtime if a snapshot is ever constructed inconsistently. `config path` and the threat model now expose the relevant project, user, and trust locations. Re-anchored onto `main` after #5104 squash-merged, so the PR diff contains only this branch's commits. ## Review Guide 1. `hooks/trust.py` — store, keys, atomic write, trust APIs 2. `hooks/loading.py` — project source ingest vs skip 3. `hooks/runtime.py` — fail-closed runtime guard 4. `main.py` — `--trust-project-hooks` + interactive prompt 5. Skim: `app.py`, `client/commands/config.py`, `THREAT_MODEL.md` 6. Tests: `test_trust.py`, then config/app/main touches <details> <summary>Test plan</summary> - Full hooks suite passes on the rebuilt stack tip. `test_trust.py` keeps one case per regressable behavior: canonical persistence, fail-closed corrupt-store handling, project-source provenance, the runtime trust guard, the three prompt outcomes, prompt suppression on persisted trust, and Textual wiring. </details>  ------------------------- - main - **feat(code): add project hooks workspace trust** 👈 - #5045 [Stack](https://www.git-town.com/how-to/proposal-breadcrumb.html) generated by [Git Town](https://github.com/git-town/git-town)  --------- Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

> [!CAUTION] > Merging this PR will automatically publish to **PyPI** and create a **GitHub release**. For the full release process, see [`.github/RELEASING.md`](https://github.com/langchain-ai/deepagents/blob/main/.github/RELEASING.md). --- _Release notes preview: keep this section in sync with the package `CHANGELOG.md`. Publish reads the merged CHANGELOG via `release.yml`, not this PR description — keep them aligned anyway so the PR stays an accurate historical record for reviewers and anyone returning later._ --- ## [0.1.50](deepagents-code==0.1.49...deepagents-code==0.1.50) (2026-07-30) ### Highlights - Added project hooks workspace trust and expanded Hooks v2 support with client and server lifecycle events plus runtime feedback ([#5105](#5105), [#5104](#5104), [#4997](#4997), [#5045](#5045)). - Added an option to mute the “YOLO is active” toast ([#5103](#5103)). - Made the splash screen `thread` ID clickable to copy it ([#5173](#5173)). - Show `ask_user` answers directly on the answered tool row ([#5100](#5100)). - Show a toast when submitting an empty required `ask_user` answer ([#5095](#5095)). - Added thread message counts to the Debug Console ([#5117](#5117)). ### Fixes and improvements - Gated Hooks v2 behind `DEEPAGENTS_CODE_EXPERIMENTAL` and improved hook resume stability across identity and Command tool results ([#5146](#5146), [#5176](#5176)). - Kept server hook state out of task results ([#5164](#5164)). - Stopped duplicate Auto transcript events during interrupt replay ([#5157](#5157)). - Kept `/update` and `/install --package` prompts responsive ([#5127](#5127)). - Refreshed the `/threads` cache after each turn ([#5174](#5174)). - Anchored toasts above the chat input and added a toast when media is dropped into a free-text question ([#5101](#5101), [#5099](#5099)). - Improved thread status message styling and links ([#5118](#5118)). - Made resume hints echo the launched command name ([#5119](#5119)). - Scoped selection copy to the clicked screen ([#5140](#5140)). - Ignored mouse hits on detached widgets ([#5114](#5114)). _End release notes preview._ --- > [!NOTE] > A **New Contributors** section is appended to the GitHub release notes automatically at publish time (see [Release Pipeline](https://github.com/langchain-ai/deepagents/blob/main/.github/RELEASING.md#release-pipeline), step 2). --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: langchain-oss-automated-triage[bot] <248757908+langchain-oss-automated-triage[bot]@users.noreply.github.com> Co-authored-by: Johannes du Plessis <johannes@langchain.dev>

github-actions Bot added dcode Related to `deepagents-code` feature New feature/enhancement or request for one internal User is a member of the `langchain-ai` GitHub organization size: XL 1000+ LOC labels Jul 27, 2026

This was referenced Jul 27, 2026

feat(code): add project hooks workspace trust #5105

Merged

feat(code): surface Hooks v2 runtime feedback #5045

Merged

open-swe Bot reviewed Jul 27, 2026

View reviewed changes

Comment thread libs/code/deepagents_code/client/non_interactive.py

Comment thread libs/code/deepagents_code/hooks/transcript.py

Comment thread libs/code/deepagents_code/tui/widgets/ask_user.py

Alexander Olsen (aolsenjazz) reviewed Jul 28, 2026

View reviewed changes

Alexander Olsen (aolsenjazz) requested changes Jul 28, 2026

View reviewed changes

Johannes du Plessis (johannes117) requested a review from Alexander Olsen (aolsenjazz) July 28, 2026 20:21

Johannes du Plessis (johannes117) and others added 6 commits July 28, 2026 14:59

test(code): trim client lifecycle coverage

94bf023

removed permission_review_payload

6d23306

renamed session context to pending context

d0fe41d

Johannes du Plessis (johannes117) force-pushed the johannes/code/dcd-71-client-lifecycle branch from 30dc097 to 59e5597 Compare July 28, 2026 21:59

Alexander Olsen (aolsenjazz) approved these changes Jul 29, 2026

View reviewed changes

Alexander Olsen (aolsenjazz) merged commit e8702df into main Jul 29, 2026
55 checks passed

Alexander Olsen (aolsenjazz) deleted the johannes/code/dcd-71-client-lifecycle branch July 29, 2026 15:29

github-actions Bot mentioned this pull request Jul 29, 2026

release(deepagents-code): 0.1.50 #5102

Merged

Navigation Menu

Uh oh!

feat(code): integrate Hooks v2 client lifecycle events - #5104

feat(code): integrate Hooks v2 client lifecycle events#5104
Alexander Olsen (aolsenjazz) merged 6 commits into
mainfrom
johannes/code/dcd-71-client-lifecycle

Johannes du Plessis (johannes117) commented Jul 27, 2026 •

edited

Loading

Uh oh!

open-swe Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

Johannes du Plessis (johannes117) commented Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review Guide

Uh oh!

open-swe Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Johannes du Plessis (johannes117) commented Jul 27, 2026 •

edited

Loading