server

Environment variable prefix used to pass CLI config to the server subprocess.

Name of the variable that selects the user profile and trust root.

Internal marker that records "the profile was defaulted, not configured".

DEEPAGENTS_HOME is re-exported for every descendant process, so a child cannot tell a defaulted profile from one the user selected by simply reading the variable. Without this marker every child concludes the profile was configured: the server subprocess renders absolute paths (leaking the OS username into the system prompt) and a post-upgrade re-exec announces a profile the user never set.

Set by the parent only, never by a user. It is a display hint, never a trust input: _honors_default_marker re-derives the default location and ignores the marker unless the resolved root matches, so a forged value cannot change which directory is used.

Process-wide path snapshot captured before any dotenv loader can run.

Pin the resolved profile selection into a child environment.

Writes the resolved root, then sets or clears the defaulted/configured marker, so a child reconstructs the same snapshot the parent captured. Both keys are always written. The marker is removed rather than left in place when the profile is configured, because a stale inherited marker would describe a profile it no longer applies to.

Build the server base URL.

Generate a langgraph.json config file for langgraph dev.

Registers the interactive agent graph and dcode's custom HTTP operations, which opt into LangGraph's route-auth layer (enable_custom_route_auth) so a deployment that configures auth gates them. Production runs noop auth and relies on the loopback bind, so that gate is inert there -- see auth_path below and THREAT_MODEL.md TB10. /offload is served by that backend boundary rather than exposed as another client-addressable graph.

Poll a LangGraph server health endpoint until it responds.

Print every pending debug-preserved server-log path to stderr, once each.

Deferred out of _stop_process_locked so the interactive TUI can surface the paths after Textual restores the terminal. Call this only from terminal stop sites that run after the terminal is restored or with no TUI active (run_textual_app finally, server_session finally, ServerProcess __aexit__) — never from the hidden in-session teardown or /restart, whose prints would be swallowed by the alternate screen.

Draining is atomic, so the interactive path's overlapping stop() calls (and any other double teardown) still announce each path exactly once.

Manages a langgraph dev server subprocess.

Focuses on subprocess lifecycle (start, stop, restart) and health checking. Env-var management for restarts (e.g. configuration changes requiring a full restart) is handled by _scoped_env_overrides, keeping this class focused on process management.