Files
8fbf53a291 fix: context provider hardening and extension points (#9104)
## Summary

Batch of fixes and improvements targeting context providers, metadata
resolution, and upstream integrations.

### Key Changes

**Context Providers (fix-3, fix-6)**
- Injectable `write_tools` on all five context providers (Workspace,
Filesystem, GitHub, Linear, Slack)
- `query_timeout` enforces one wall-clock deadline per query tool call

**Workspace Security (fix-1, fix-2)**
- `enforce_excludes` guards all direct-path operations (read, write,
delete)
- Git backend keeps PAT off disk using bare origin + env credential
helper

**Metadata Resolution — Agent, Team, Workflow Consistency**
- All three now use consistent precedence: `component < session <
call-site` (later wins)
- Fixed `_resolve_run_params` loop order in Workflow (was backwards)
- Fixed `_update_metadata` merge direction in Workflow (session now wins
over workflow)
- Added missing metadata/dependencies support to
`_arun_background_stream`
- Agent/Team/Workflow instances are no longer mutated per run — deepcopy
isolation
- Added metadata resolution cookbooks for Agent and Workflow (Team
already had one)

**Slack Delivery (fix-4)**
- Unfurl/markdown options including pause sites
- Inert card args support

**Auth & Scheduling (fix-5, fix-7)**
- `AuthConfig(interactive=False)` raises instead of blocking on
`run_local_server`
- `get_schedules` gains `raise_on_error`;
`ScheduleManager.list_all/alist_all` added

**Team.arun**
- Session metadata read moved before `resolve_run_options` to honor
session-level overrides
- `initialize_team` moved to top in `arun_dispatch` to match sync
behavior

### Also Included
- Upstream fixes: learnings owner match, archive race test, AgentOSTools
schedule reporting, file-generation import warnings
- Updated callers of `_aload_or_create_session` for 3-tuple return
(job_queue.py, status_persist.py)
- Fixed test expectations to match correct precedence

## Type of change

- [x] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)

## Checklist

- [x] Formatted and validated
- [x] Tests pass (539 workflow tests)
- [x] Metadata resolution consistent across Agent, Team, Workflow

---------

Co-authored-by: Claude Fable 5 <[email protected]>
Co-authored-by: Mustafa Esoofally <[email protected]>
2026-08-26 14:10:13 -04:00
..
2026-04-23 15:57:24 +05:30
2026-08-24 18:19:42 +05:30

Context Providers

agno.context exposes a uniform API for plugging an external source into an agent as a natural-language tool.

A ContextProvider owns two things:

  1. query(question) / aquery(question) — natural-language access; returns an Answer.
  2. get_tools() — the tool surface the calling agent sees. By default, this is a single query_<id> tool (plus update_<id> for writable providers) that routes through a scoped sub-agent.

Providers that hold async resources (MCP sessions, watched inboxes, etc.) also implement asetup() / aclose(). Callers should bracket their use with these so the resource's lifetime is owned by a single task — typically wired into the application lifespan.

Providers ship in this package:

Provider Source Tools
FilesystemContextProvider Local directory tree query_<id> (read-only FileTools sub-agent)
WorkspaceContextProvider Local project workspace query_<id> (read-only Workspace sub-agent with project-aware excludes)
WebContextProvider + ExaMCPBackend Web via Exa's public MCP server (keyless / keyed) query_<id> (search + fetch sub-agent)
WebContextProvider + ExaBackend Web via Exa's direct SDK query_<id> (search + fetch sub-agent)
WebContextProvider + ParallelBackend Web via Parallel's direct SDK query_<id> (search + fetch sub-agent)
WebContextProvider + ParallelMCPBackend Web via Parallel's public MCP server (keyless / keyed) query_<id> (search + fetch sub-agent)
DatabaseContextProvider Any SQL database (SQLAlchemy) query_<id>, update_<id> (separate read/write sub-agents)
SlackContextProvider A Slack workspace query_<id>, update_<id> (separate read/write sub-agents; writer only gets send_message + the lookup tools it needs)
MCPContextProvider One MCP server query_<id> (sub-agent over the server's tools) or flat tools in mode=tools
GoogleDriveContextProvider Google Drive via service account query_<id> (list / search / read sub-agent; all-drives aware)
WikiContextProvider + FileSystemBackend A directory of markdown files query_<id>, update_<id> (separate read/write sub-agents over Workspace tools)
WikiContextProvider + GitBackend A clone of a git repo (PAT auth) query_<id>, update_<id>; writes auto-commit, rebase, and push
WikiContextProvider + NotionDatabaseBackend A Notion database (one row per page) mirrored as flat .md files; notion_page_id / notion_last_edited in frontmatter query_<id>, update_<id>; writes round-trip through Notion blocks; conflict-detected on update
WikiContextProvider + web=ContextBackend Wiki + web ingestion (e.g. ExaMCPBackend) Write sub-agent gains web search/fetch so update_<id>("add this paper") fetches and digests in one hop

All read+write providers (WikiContextProvider, DatabaseContextProvider, SlackContextProvider) accept read=True, write=True flags. Set write=False for a read-only surface (e.g. a code-managed voice wiki, an analytics-only DB), or read=False for a write-only sink. Both False raises.

Cookbooks

File What it shows
00_filesystem.py Browse local files via FilesystemContextProvider
01_web_exa.py Web research via Exa's direct SDK (needs EXA_API_KEY)
02_web_exa_mcp.py Web research via Exa's keyless public MCP endpoint
03_web_parallel.py Web research via Parallel's direct SDK
04_database_read_write.py Read + write a SQLite DB; end-to-end round trip
05_slack.py Slack workspace: read channels (always) + optional post via SLACK_WRITE_CHANNEL
06_mcp_server.py Wrap an MCP server; explicit asetup / aclose lifecycle
07_google_drive.py Google Drive via a service account; reads a shared Doc
08_multi_provider.py Three providers on one agent; names compose cleanly
09_web_plus_slack.py Compositional: Slack topics feed per-topic web searches
10_custom_provider.py Subclass ContextProvider for your own source
11_web_parallel_mcp.py Web research via Parallel's public MCP endpoint (keyless; PARALLEL_API_KEY raises the ceiling)
12_engineering_briefing.py Slack topics + codebase workspace + Parallel web into an engineering-sync briefing
13_workspace.py Browse a repository root via WorkspaceContextProvider without virtualenv / scratch noise
14_wiki_filesystem.py Read + write a local markdown wiki via WikiContextProvider(backend=FileSystemBackend(...))
15_wiki_git.py Same provider against a real git remote; auto-commits and pushes (env-gated on WIKI_REPO_URL / WIKI_GITHUB_TOKEN)
15a_wiki_notion.py Same provider against a Notion database (flat: one row per page); files a customer call summary and prints the local mirror path + Notion page URL (env-gated on NOTION_API_KEY / NOTION_DATABASE_ID)
16_wiki_with_web.py Wiki + Exa MCP web backend; "add this paper" fetches the URL, digests it, and files it in one update call
17_wiki_dual.py Two WikiContextProvider instances on one agent — company_knowledge (full) + company_voice (write=False)

Run

# Self-contained (no external service)
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/00_filesystem.py
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/04_database_read_write.py
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/10_custom_provider.py
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/13_workspace.py
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/14_wiki_filesystem.py
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/16_wiki_with_web.py
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/17_wiki_dual.py

# Wiki against a real git repo (PAT auth; pushes commits)
OPENAI_API_KEY=... \
    WIKI_REPO_URL=https://github.com/<owner>/<repo>.git \
    WIKI_GITHUB_TOKEN=ghp_... \
    .venvs/demo/bin/python cookbook/12_context/15_wiki_git.py

# Wiki against a Notion database (integration token + database id)
OPENAI_API_KEY=... \
    NOTION_API_KEY=ntn_... \
    NOTION_DATABASE_ID=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
    .venvs/demo/bin/python cookbook/12_context/15a_wiki_notion.py

# Exa SDK (keyed) — higher throughput
OPENAI_API_KEY=... EXA_API_KEY=... .venvs/demo/bin/python cookbook/12_context/01_web_exa.py

# Keyless Exa MCP — no signup required
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/02_web_exa_mcp.py

# Keyless Parallel MCP — no signup required; set PARALLEL_API_KEY for higher limits
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/11_web_parallel_mcp.py

# Parallel SDK
OPENAI_API_KEY=... PARALLEL_API_KEY=... .venvs/demo/bin/python cookbook/12_context/03_web_parallel.py

# Slack bot token (xoxb-...); set SLACK_WRITE_CHANNEL=#channel to also demo posting
OPENAI_API_KEY=... SLACK_BOT_TOKEN=xoxb-... .venvs/demo/bin/python cookbook/12_context/05_slack.py

# `uvx` on PATH (ships with `uv`) — the MCP time server is downloaded on first run
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/06_mcp_server.py

# Google service-account JSON with at least one folder shared to its email
OPENAI_API_KEY=... GOOGLE_SERVICE_ACCOUNT_FILE=/path/to/sa.json \
    .venvs/demo/bin/python cookbook/12_context/07_google_drive.py

# Multi-provider (fs + web + db) — web uses Exa MCP, so no EXA key required
OPENAI_API_KEY=... .venvs/demo/bin/python cookbook/12_context/08_multi_provider.py

# Compositional demo (Slack topics -> per-topic Parallel web searches)
OPENAI_API_KEY=... PARALLEL_API_KEY=... SLACK_BOT_TOKEN=xoxb-... \
    .venvs/demo/bin/python cookbook/12_context/09_web_plus_slack.py

# Advanced briefing demo (Slack topics -> codebase workspace -> Parallel web)
OPENAI_API_KEY=... PARALLEL_API_KEY=... SLACK_BOT_TOKEN=xoxb-... \
    .venvs/demo/bin/python cookbook/12_context/12_engineering_briefing.py