Changelog New Features: Native Approvals for Harness Agents: Claude's and Codex's own permission requests now reach the AgentOS approval UI. When the agent has a database, including one AgentOS supplies, a native request persists a PAUSED run that shows up in the existing chat and Approvals views, and Resolve plus Continue Run delivers the decision back to the same native execution without replayi…
Changelog New Features: Harness Agents in Teams and Workflows: ClaudeAgent and CodexAgent can now be members of an Agno Team and steps of a Workflow, including inside Parallel, Loop, Condition and Router. The team leader delegates to them with delegate_task_to_member like any other member, each harness runs with its own model, tools and workspace, keeps its own conversation across turns of the sam…
Changelog Bug Fixes: CodexAgent: Now signs in automatically with OPENAI_API_KEY, and keeps an existing ChatGPT or other login. OS Manager: OS Manager now lists and runs external agents such as ClaudeAgent and CodexAgent registered in AgentOS(agents=[...]), by name or ID. Knowledge Upload: POST /knowledge/content now returns a clear 400 message when an upload has no file, text_content or URL, or wh…
Changelog New Features: MCP Tool Runner: POST /mcp/server/tools/{tool_name}/run runs any tool listed on the AgentOS Server Card over HTTP and returns its result, so a tool can be tested without an MCP client. Turn it off with MCPConfig(tool_run_endpoint=False). See cookbook. Bug Fixes: AgentOS MCP Server: /mcp and /mcp/server-card now accept browser requests from origins the AgentOS CORS policy al…
Changelog New Features Postgres Sandbox Checkpoint Store: Added PostgresCheckpointStore for storing sandbox checkpoints directly in PostgreSQL, allowing multi-replica deployments to restore sessions without S3 or shared filesystems. Checkpoints are chunked, written transactionally, deduplicated by SHA-256 and verified on read. It is opt-in; existing checkpoint defaults are unchanged. (#11186) Fram…
Changelog Improvements: OS Manager Tool Limits: OSManager takes tool_call_limit (default 8, per coordinator run, including delegations) and member_tool_call_limit (default 24, per specialist invocation). Explanations stay scoped to the question and grounded in the Agno docs. Set either limit to None to restore unlimited tool use, as before. See cookbook. Cartesia Default Model: CartesiaTools now d…
Changelog New Features: Eval Case Run Arguments: Case takes session_id, user_id, session_state, dependencies, metadata and knowledge_filters, forwarded to the agent or team run, and input accepts a Message, so a case can attach an image or file to the graded turn. Cases sharing a session_id run as consecutive turns. See cookbook. Improvements: OS Manager Docs Access: OS Manager queries the Agno do…
Changelog New Features: Repositories for Sandboxed Agents: A sandboxed ClaudeAgent or CodexAgent takes repository=Repository(url, branch="main") and starts every session in that repository at /workspace/repository. The first turn pins the exact commit, later turns keep the pin and the engineer's edits across warm reuse and checkpoint restore, and private repositories authenticate with GITHUB_READ_…
Changelog New Features: Sandboxed Harness Agents: ClaudeAgent and CodexAgent take a sandbox= parameter and run the whole harness process inside an isolated, per-session computer instead of on the host, with session state that survives losing the container, the host or the replica that ran the last turn. No new classes to hold: ClaudeAgent(id="coder", db=PostgresDb(...), sandbox=DockerSandbox("agno…
Changelog New Features: Durable External Agent Sessions: ClaudeAgent sessions now resume on any replica. The Claude SDK session id is stored on the Agno session (#10903), and with a database that supports transcript storage (PostgresDb, AsyncPostgresDb, SqliteDb, AsyncSqliteDb) every transcript line is mirrored into the new agno_transcripts table, so a later turn on another machine resumes from th…
Changelog New Features: Conversation Compaction: Agent(compaction=True) keeps long sessions inside the context window by folding older turns into a summary. Stored messages are never rewritten: a CompactionRecord in the new agno_compactions table drives a derived model payload, so removing the record restores the full conversation. Tune with Compaction(model=..., compact_at_tokens=..., uncompacted…
Changelog New Features Live progress & cancellation for page sync: Knowledge.stream_sync_pages() / astream_sync_pages() yield typed PageSyncProgress snapshots plus one terminal SyncReport, and sync_pages / async_sync_pages accept an on_progress observer. A workflow function step can now yield StepProgress(content=..., data=...) before its StepOutput, emitted as a native StepProgressEvent under the…
New Features User Management / Authorization (RBAC): a new agno.os.authz package adds role-based access control to AgentOS — a role store, scope policy, audit log, user directory and an admin router, with pluggable authorization engines (a native engine plus a fine-grained fga engine). Scopes and auth middleware were extended to enforce it. AgentOS Filesystem: a new agno.fs filesystem (DbFileSyste…
Changelog New Features: Knowledge Retrieval Pipeline: Knowledge.search() now runs a knowledge level retrieval pipeline that can widen the candidate pool before a reranker reorders it, so rerankers no longer need to be implemented per vector db. MMR Reranker: Added MMRReranker (Maximal Marginal Relevance) as a retrieval strategy that balances relevance against diversity so near-duplicate chunks do…
Changelog New Features: Azure OpenAI Responses: Added AzureOpenAIResponses to use the Responses API with Azure OpenAI deployments. See cookbook. Elasticsearch: Added Elasticsearch vector database with vector, keyword and hybrid search. See cookbook. DocumentationMarkdown: Added a transform for Knowledge.sync_pages that converts Mintlify and Fumadocs components into plain Markdown. See cookbook. Im…
What's Changed fix: clean startup logs and initialize durable queue storage by @ashpreetbedi in #10071 fix: preserve Control Plane access with public surfaces by @ashpreetbedi in #10074 Release: v3.0.9 by @ashpreetbedi in #10076 Full Changelog: v3.0.8...v3.0.9
Changelog New Features Complete page reads: Knowledge.read_full_page and aread_full_page return an entire published page from one bounded SQL read and read-only snapshot. Both support revision pinning, character limits and deadlines. Oversized pages return None; missing or changed pages retain typed errors. Calls share the existing eight-slot page-read worker pool. (feat: add bounded full-page rea…
Changelog New Features Page storage in agno.knowledge.page. Knowledge atomically publishes catalog metadata, filesystem text and vectors, preserves previous revisions when a refresh fails, and exposes bounded sync and async setup, source synchronization, search, read, list and grep APIs. Installed through the new agno[pages] extra. (#9963) Knowledge(page_search=PageSearchConfig(...)) provides type…
Changelog New Features Stateless MCP serving. MCPConfig(stateless=True) serves /mcp without session tracking, so any replica can answer any request and a multi-instance deployment needs no session affinity. Costs server-initiated notifications and SSE resumability, so it stays off by default. See cookbook. MCPTools(protocol_mode=...) selects which MCP protocol era to negotiate. Defaults to "legacy…
Changelog Breaking Changes Embedding failures are surfaced, not masked. Ingestion now reports embedding failures instead of returning success. Content that previously showed completed may now show failed or partial — those ingests were always incomplete, they were only reported as successful. The ContentStatus enum in the API (/openapi.json) gains partial, changing from ["processing","completed","…
⚠️ Breaking release. A database migration is required before v3.0 serves traffic. Read the v3 Migration Guide first, and see the full v3.0 Changelog for every change. New Features Tool result offloading: Agent(offload_tool_results=True) / Team(...) writes any tool result over 16,000 chars to AgentFS and leaves a short envelope (preview, size, result_id) in the message; the agent gets read_result /…
Changelog Behavior Changes KnowledgeManagementTools constructor flags renamed, ingest_path now opt-in: the 2.x-style enable_ingest / enable_remove flags are replaced by flags named after the tools they register — ingest_url, ingest_path, ingest_text, remove_content (the old names are no longer recognised and are ignored if passed). ingest_path defaults to off: it reads any path the server process…
Changelog New Features Per-page website ingestion: loading a website into a knowledge base now lands one content row per page, with each row's id equal to the content_id its vectors carry, so pages can be listed, refreshed, and deleted individually. The parent row becomes the site row — named after the host, aggregating status ("9 of 10 pages loaded; failed: …"), and cascading deletes to every pag…
Changelog Behavior Changes Run metadata precedence: metadata now resolves as component, then session, then call-site on Agent, Team, and Workflow, so a metadata= passed to run() wins over agent.metadata where the component value previously won. A run no longer assigns session metadata back onto the shared component, so code that read agent.metadata after a run to observe session values now sees th…
Changelog Improvements Faster agent runs with many tools: Tool schemas are now derived once and cached across runs, cutting per-run overhead for agents that carry large toolkits. (#9771) Faster long conversations: Session history is loaded incrementally per turn, so response time stays flat as a conversation grows instead of scaling with its length. (#9775) PubMed request timeout: PubmedTools now…
What's Changed test: stop three suites reading state they do not control by @ashpreetbedi in #9736 fix: state the team leader's delegation rule as need, not as a comparison with itself by @ashpreetbedi in #9737 fix: refuse dispatch cycles and bound dispatch depth in the Studio dispatch tools by @ashpreetbedi in #9745 fix: end a no-task tasks run by answering, and forbid joined member ids on nested…
What's Changed feat: run SqliteDb in WAL journal mode and restore the durable benchmark row by @ashpreetbedi in #9707 cookbook: install pydantic-ai-slim in the perf environment by @ashpreetbedi in #9706 chore: v3.0 release readiness - put the database suites under CI and fix the gates that never ran by @ashpreetbedi in #9712 feat: add MiniMax video generation tools by @octo-patch in #9529 fix: sto…
What's Changed fix: keep a workflow session's runs to its own runs by @harshsinha03 in #9634 fix: point invalid-schema table errors at the migration path by @ysolanky in #9631 fix: cache resolved tables in SQL adapters to avoid per-query existence checks by @kausmeows in #9623 fix: install a usable Postgres driver with the postgres and dev extras by @ashpreetbedi in #9635 fix: workflow event seria…
What's Changed chore: remove deprecated enable_user_memories, search_session_history, num_history_sessions and num_past_session_runs params by @sannya-singal in #7834 feat: evals user-isolation by @harshsinha03 in #8262 chore: remove v3.0.0 evals migration by @harshsinha03 in #8448 refactor: drop flat HITL kwargs in favor of human_review=HumanReview(...) by @sannya-singal in #8354 feat: consolidat…
Changelog New Features StudioRunnerTools: New identity-aware dispatch toolkit (agno.tools.studio_runner.StudioRunnerTools) that splits execution out of StudioTools. Any component (team lead, router) can mount it to discover and run Studio-built agents/teams/workflows without getting the Studio's create/edit/delete surface. run_* tools thread the caller's user_id into the sub-run so per-user state…