feat(skills): add skills support to advanced agents with sandboxed cli tool

[mariadhakalUipath]

Title: Uipath Skills with Cli tool for advanced agents.

Summary

Adds skills feature for advanced agents. Agent can act on it — run uip commands, review what it ran, and verify what it scaffolded.

⚠️ Note for coded agents

The feature flag exists for low-code graph builder reached only via agent.json →
AgentsRuntimeFactory → _build_advanced_agent.

Coded agents resolve to a different runtime factory (langgraph.json) and never evaluate that flag. A coded author who writes:
from uipath_langchain.agent.tools.internal_tools import create_uipath_cli_tool

gets full uip execution with no kill switch at this layer.

If you are adding this tool to a coded agent and need destructive commands restricted, wrap it with your own validation before handing it to the agent. Do not rely on a tool-level @guardrail, which does not fire for this tool.
For example, delegate to the tool from your own StructuredTool that rejects the commands you care
about, and apply platform guardrails at the agent/graph level rather than the tool level.

[Copilot]

Pull request overview

Adds initial “skills” plumbing to advanced agents and introduces a sandbox-oriented internal tool for running uip commands inside an agent workspace.

Changes:

• Introduces a new create_uipath_cli_tool() (uipath_cli) StructuredTool that runs one uip command per invocation with command validation.
• Adds unit tests covering command parsing, validation, subprocess result mapping, and timeout behavior for the new tool.
• Extends advanced-agent builders to accept and forward a skills parameter into the underlying deepagents agent construction.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File	Description
tests/agent/tools/internal_tools/test_uipath_cli_tool.py	Adds test coverage for the new sandboxed CLI tool.
src/uipath_langchain/agent/tools/internal_tools/uipath_cli_tool.py	Implements the sandboxed uipath_cli tool and its input/output schemas.
src/uipath_langchain/agent/tools/internal_tools/__init__.py	Exports create_uipath_cli_tool from the internal tools package.
src/uipath_langchain/agent/advanced/agent.py	Adds skills parameter propagation to deepagents agent creation/wrappers.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

Comments suppressed due to low confidence (1)

src/uipath_langchain/agent/advanced/agent.py:45

• The create_advanced_agent docstring documents memory but not the newly added skills parameter, which is part of the public API. Update the docstring to describe what skills does and how an empty value is handled.

    """Create a deepagents agent with planning, filesystem, and sub-agent tools.

    ``memory`` is a list of file paths loaded via deepagents' ``MemoryMiddleware``:
    each is read from ``backend`` and injected into the system prompt every turn,
    and the model maintains them with ``edit_file``. Empty disables the middleware.
    """

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

Comments suppressed due to low confidence (1)

src/uipath_langchain/agent/advanced/agent.py:42

• create_advanced_agent now accepts skills, but the docstring only documents memory. Since empty skills collapses to None (disabling skills support), documenting this behavior would help callers understand how to enable/disable the feature.

    skills: Sequence[str] = (),
) -> CompiledStateGraph[Any, Any, Any, Any]:
    """Create a deepagents agent with planning, filesystem, and sub-agent tools.

    ``memory`` is a list of file paths loaded via deepagents' ``MemoryMiddleware``:

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated no new comments.

Suppressed comments (3)

src/uipath_langchain/agent/tools/internal_tools/uipath_cli_tool.py:37

• The tool description says “A negative exit_code means the command was refused”. That’s inaccurate because real subprocess exit codes can be negative on Unix when terminated by a signal. The contract in UiPathCliOutput/test cases is specifically “exit_code == -1000 indicates refusal”, so the description should match to avoid confusing the agent.

    "Run a single UiPath `uip` command in the agent workspace; returns "
    "exit_code/stdout/stderr. Only the uip/uipath binaries, one command per call; "
    "shell chaining is refused. A negative exit_code means the command was refused "
    "before it ran and stderr explains why. Use `subdir` to target a scaffolded "
    "project folder."

src/uipath_langchain/agent/tools/internal_tools/uipath_cli_tool.py:167

• On timeout, proc.kill() can raise ProcessLookupError if the process exits between the timeout firing and the kill call. That would crash the tool instead of returning the recoverable _REJECTED_EXIT_CODE payload.

    except asyncio.TimeoutError:
        proc.kill()
        await proc.wait()
        return _rejected(
            echoed, f"Command timed out after {_COMMAND_TIMEOUT_SECONDS}s."

src/uipath_langchain/agent/advanced/agent.py:110

• This PR introduces a sandboxed uipath_cli tool, but create_advanced_agent only forwards the skills list into deepagents and never registers the new tool. The new tool module’s docstring says it is “injected programmatically by the agent graph builder when UiPath skills are active”, but there is currently no call site for create_uipath_cli_tool in src/ (verified by repo search). If skills are expected to prescribe uip commands, the agent needs the tool added to its tool list when skills are enabled (and a FilesystemBackend workspace exists).

        memory=list(memory) or None,
        middleware=list(middleware),
        skills=list(skills) if skills else None,

[radu-mocanu]

this is a logic-changing public change, but the pr does not bump the package version. main is already at 0.16.2 while this branch still has 0.16.1. rebase and bump to the next version in pyproject.toml before merge.

[mariadhakalUipath]

Okay will do this before I merge.

[radu-mocanu]

Handle task cancellation here as well. Cancelling proc.communicate() only cancels the coroutine that drains the pipes and waits for completion; it does not terminate the separate OS process. I reproduced this with a real child process: after cancelling _run_uip_subprocess, proc.returncode remained None and the child kept running.

Add this cancellation branch alongside the timeout branch:

    except asyncio.CancelledError:
        try:
            proc.kill()
        except ProcessLookupError:
            pass
        await asyncio.shield(proc.wait())
        raise

This kills and reaps the child, while the bare raise preserves the original cancellation. Add a regression test that cancels the task and asserts both kill() and wait() are called. This covers graceful asyncio cancellation only; a hard kill of the Python parent bypasses all cleanup and must be handled by the process supervisor.

[radu-mocanu]

FYI this protection is for graceful stopping only. serverless force kill will most likely not stop the underlying CLI command

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
96.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud