Affected version
Reports that share this version, grouped in one feed.
ToolCallLimitMiddleware unconditionally emits ToolMessages for blocked or stopped tool calls, even when those tool_call_ids already have a ToolMessage in the message history, producing duplicate ToolMessages that violate the one-result-per-tool_call_id invariant and cause provider API failures or persistent broken threads.
The PIIMiddleware with type="ip" only compiles an IPv4 regex, so IPv6 addresses are not redacted or blocked, causing silent PII leakage to the model.
Static type checking fails for create_agent when a heterogeneous list of middleware objects with different state_schema types is combined with an explicit state_schema argument. Runtime behavior works correctly, but type inference collapses all middleware to AgentMiddleware[AgentState, ...], causing `no-matching-overload` errors.