Extensible harness

Deep Agents Code

Extensible LangGraph coding agent with headless runs and optional remote sandboxes.

Status: Active
License: MIT
Evidence: Documented + code-verifiable, 9 sources
Product record checked: 2026-08-22

At a glance

LangChain's terminal coding product built on Deep Agents and LangGraph, with an interactive TUI, non-interactive pipeline runner, custom subagents, MCP, local session checkpoints, persistent memory, approval gates, and integrations for managed remote sandboxes.

Good choice if

Python and LangGraph teams that want a turnkey CLI they can also extend
CI and scripted coding workflows that need turn limits, sessions, and structured non-interactive output
Untrusted repositories when paired with one of the documented remote sandbox backends

Check before choosing

Local execution is host-first and trusts the working directory; project artifacts can influence the agent before the first approval prompt
Isolation is an opt-in remote-backend surface whose provider internals and guarantees sit outside the Deep Agents Code repository
The CLI starts a local LangGraph development server and stores sessions in SQLite, adding operational moving parts compared with a small single-binary agent

See 2 more considerations

MCP servers, hooks, skills, and repository instructions expand the trusted computing base and need their own review
The repository includes project-owned eval packages, but they are not treated as independent comparative evidence or imported into product classification

Quick facts

Interfaces: Terminal, Automation
Approval style: Interactive approvals
Model portability: Provider choice
Isolation: Managed sandbox
Agent organization: Delegated subagents
Local model path: Not documentedAbsence of current documentation is not proof that the capability is impossible.

View full technical record

Catalog layer: Coding harness
Harness membership: Qualifies: 4 required criteria evidenced
Product role: Extensible harness
Agent organization: Delegated subagents
Runtime posture: Host-first
Isolation options: Managed sandbox
State model: Persistent memory
Context lifecycle: Persistent memory
Permission posture: Interactive approvals
Verification: Tool-assisted checks
Observability: Structured traces
Recovery: Session resume
Interfaces: Terminal, Automation
Provider posture: Multi-provider
Model portability: Provider choice
Subscription access: Not documented
Enterprise access: Not documented
Local model path: Not documentedAbsence of current documentation is not proof that the capability is impossible.
Claim boundary: Harness capability only

Capability support

Documented first-class product support, checked against the sources below.

External tools (MCP): DocumentedProduct-supported MCP integrationSource · checked 2026-07-28The source establishes the mechanism, not its quality or availability in every mode.
Reusable skills: Not documentedNo first-class support established by the current recordAbsence of current documentation is not proof that the capability is impossible.
Local models: Not documentedNo first-class support established by the current recordAbsence of current documentation is not proof that the capability is impossible.
Agent parallelism: DocumentedDelegated or parallel agent workflowSource · checked 2026-07-28The source establishes the mechanism, not its quality or availability in every mode.
Runs without an open UI: DocumentedNon-interactive or automation surfaceSource · checked 2026-07-28The source establishes the mechanism, not its quality or availability in every mode.
Browser control: Not documentedNo first-class support established by the current recordAbsence of current documentation is not proof that the capability is impossible.
Isolated execution: OptionalOptional managed remote sandbox backends; local execution trusts the host working directorySource · checked 2026-07-28The source establishes the mechanism, not its quality or availability in every mode.
Undo file changes: Not documentedNo first-class support established by the current recordAbsence of current documentation is not proof that the capability is impossible.

Getting started

Install with the official dcode bootstrap command or the deepagents-code package, configure a supported model provider, and select a remote sandbox backend before opening untrusted repositories.

Open official documentation

Classification and operating model

Category fit and technical mechanisms are evidence records, not product-quality scores.

Category fit: Qualifies, 4/4 criteria
Operating model: 7/7 layers documented

Inspect category criteria and operating mechanismsFirst-party records

Why it qualifies as a coding harness

This confirms category fit, not product quality. Every required criterion links back to first-party evidence.

Qualifies4 of 4 required criteria evidenced

Adaptive agent loop
Documented
The system repeatedly observes results and chooses the next action instead of following a fixed one-pass graph.
EvidenceDeep Agents Code threat model
Repository tool execution
Documented
The system can use tools to inspect and change a repository or its execution environment.
EvidenceDeep Agents Code threat model
Task-aware context management
Documented
The runtime assembles, updates, compacts, retrieves, or persists task-relevant context while work proceeds.
EvidenceDeep Agents Code overview
Model-independent runtime control
Documented
Permissions, budgets, interruption, policy, or stop controls operate outside the model's own text generation.
EvidenceDeep Agents Code threat model

How it works under the hood

Seven mechanisms mapped from first-party records. These labels describe what the harness provides, not how intelligent its model is.

7/7layers documented

Execution & isolationSandbox availableDocumented mechanism, not a performance score.
Tooling & integrationsExtensible toolsDocumented mechanism, not a performance score.
Context & statePersistent stateDocumented mechanism, not a performance score.
Lifecycle & recoverySession resumeDocumented mechanism, not a performance score.
ObservabilityStructured tracesDocumented mechanism, not a performance score.
VerificationTool-assistedDocumented mechanism, not a performance score.
Governance & permissionsApproval promptsDocumented mechanism, not a performance score.

Measured and public context

Configuration-specific measurements and source-native activity stay separate from general product capability.

Inspect code audit, measured configurations, and ecosystem signalsContext, not a product score

Public code audit

4/5public artifacts present

Security policy: Not found
CI workflow: Present at inspected commit
Automated tests: Present at inspected commit
Evaluation assets: Present at inspected commit
Contributor documentation: Present at inspected commit

The inspected monorepo contains 1,473 files, 47 workflows, roughly 400 test-like paths, contributor guidance, and extensive project-owned evaluation packages, but no repository security policy. Evals cover the broader Deep Agents stack and do not supply an independent immutable product comparison, so no score is imported.

Inspect commit 43eb196cf7faa993f2fa372dcc1fa65572d8a301, checked 2026-07-28

Measured configurations

No benchmark run passes the full metadata admission policy for this harness yet. Missing data is not scored as zero.

Benchmark policy and all runs

Context, not quality

Public ecosystem signals

Source-native observations for exact mapped artifacts and reviewed stable release trains. Different units and populations stay separate, and missing coverage is never treated as zero.

View this harness in Usage

Latest stable releasedeepagents-code==0.1.66Released 2026-09-03; 54 stable releases in 90 daysOpen release
OpenRouter 30d tokens3.25B#89 coding app; 2026-08-09 to 2026-09-07Open app page
Release asset downloads52368 stable releases; 136 matched assetsOpen artifact
GitHub stars29.14KFull-source repository; 4.09K forksOpen artifact

First-party evidence

Each capability claim links to the first-party record that supports it.

9 first-party sourcesProduct record checked 2026-08-22

Execution and control

2 sources

Deep Agents Code 0.1.59 managed-policy releaseOpens in a new tabManaged TOML configuration, recoverable tool-argument validation, configurable teardown usage statistics, and durable-mask config resolutionOfficial announcementSource checked 2026-08-22

View 1 more source

Deep Agents Code 0.1.57 approval-surface releaseOpens in a new tabACP approval modes, multi-select user questions, cold-cache warnings, and the Python 3.12 runtime requirementOfficial announcementSource checked 2026-08-20

Agents, state and recovery

1 source

Deep Agents Code 0.1.58 recovery releaseOpens in a new tabMCP reauthentication, interruptible tool offloading, hook-pipe draining, and configuration recoveryOfficial announcementSource checked 2026-08-20

Additional first-party sources

6 sources

Deep Agents Code overviewOpens in a new tabInteractive coding workflow, web search, resume, remote sandboxes, persistent memory, skills, headless mode, approvals, and installationOfficial repositorySource checked 2026-07-28

View 5 more sources

Ecosystem context

OpenRouter coding CLI agent directory Used to discover Deep Agents Code; all published claims resolve to LangChain-controlled sources. Observed 2026-07-28.