agent-framework-core 1.17.0__tar.gz → 1.19.0__tar.gz

{agent_framework_core-1.17.0 → agent_framework_core-1.19.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-framework-core
-Version: 1.17.0
+Version: 1.19.0
 Summary: Microsoft Agent Framework for building AI Agents with Python. This is the core package that has all the core abstractions and implementations.
 Author-email: Microsoft <af-support@microsoft.com>
 Requires-Python: >=3.10
@@ -21,6 +21,7 @@ Requires-Dist: typing-extensions>=4.15.0,<5
 Requires-Dist: pydantic>=2,<3
 Requires-Dist: python-dotenv>=1,<2
 Requires-Dist: opentelemetry-api>=1.39.0,<2
+Requires-Dist: pyyaml>=6.0,<7.0
 Requires-Dist: mcp>=1.24.0,<2 ; extra == "all"
 Requires-Dist: agent-framework-a2a ; extra == "all"
 Requires-Dist: agent-framework-ag-ui ; extra == "all"
@@ -41,8 +42,7 @@ Requires-Dist: agent-framework-foundry-hosting ; extra == "all"
 Requires-Dist: agent-framework-foundry-local ; extra == "all"
 Requires-Dist: agent-framework-gemini ; extra == "all"
 Requires-Dist: agent-framework-github-copilot ; extra == "all" and ( python_version >= '3.11')
-Requires-Dist: agent-framework-hyperlight ; extra == "all" and ( ((sys_platform == 'linux' and platform_machine == 'x86_64') or (sys_platform == 'win32' and platform_machine == 'AMD64')) and python_version < '3.14')
-Requires-Dist: agent-framework-lab ; extra == "all"
+Requires-Dist: agent-framework-hyperlight ; extra == "all" and ( python_version < '3.15' and ((sys_platform == 'linux' and platform_machine == 'x86_64') or (sys_platform == 'win32' and platform_machine == 'AMD64')))
 Requires-Dist: agent-framework-mem0 ; extra == "all"
 Requires-Dist: agent-framework-mistral ; extra == "all"
 Requires-Dist: agent-framework-monty ; extra == "all"
@@ -228,6 +228,21 @@ asyncio.run(main())
 
 You can explore additional agent samples [here](https://github.com/microsoft/agent-framework/tree/main/python/samples/02-agents).
 
+### MCP HTTP client ownership and cookies
+
+**Breaking change:** HTTP clients created by `MCPStreamableHTTPTool` no longer persist
+response cookies. This applies with or without a `header_provider`, including repeated
+calls within the same MCP session. Connection reuse, timeout and redirect defaults,
+and cleanup on close or reset are preserved. Explicit `Cookie` headers supplied through
+`static_headers` or a `header_provider` are still supported.
+
+Applications relying on cookie-based authentication, sessions, or load-balancer affinity
+must supply an `httpx.AsyncClient` through `http_client=`. Supplied clients retain their
+configuration and response-cookie handling and must be closed by the caller. Scope
+cookie-bearing clients and MCP tool sessions to one authenticated principal; do not
+share a user-specific cookie jar across users. Rejecting cookies does not partition
+MCP protocol sessions or other server-side state between principals.
+
 ## 5. Multi-Agent Orchestration
 
 Coordinate multiple agents to collaborate on complex tasks using orchestration patterns:

{agent_framework_core-1.17.0 → agent_framework_core-1.19.0}/README.md

@@ -168,6 +168,21 @@ asyncio.run(main())
 
 You can explore additional agent samples [here](https://github.com/microsoft/agent-framework/tree/main/python/samples/02-agents).
 
+### MCP HTTP client ownership and cookies
+
+**Breaking change:** HTTP clients created by `MCPStreamableHTTPTool` no longer persist
+response cookies. This applies with or without a `header_provider`, including repeated
+calls within the same MCP session. Connection reuse, timeout and redirect defaults,
+and cleanup on close or reset are preserved. Explicit `Cookie` headers supplied through
+`static_headers` or a `header_provider` are still supported.
+
+Applications relying on cookie-based authentication, sessions, or load-balancer affinity
+must supply an `httpx.AsyncClient` through `http_client=`. Supplied clients retain their
+configuration and response-cookie handling and must be closed by the caller. Scope
+cookie-bearing clients and MCP tool sessions to one authenticated principal; do not
+share a user-specific cookie jar across users. Rejecting cookies does not partition
+MCP protocol sessions or other server-side state between principals.
+
 ## 5. Multi-Agent Orchestration
 
 Coordinate multiple agents to collaborate on complex tasks using orchestration patterns:

{agent_framework_core-1.17.0 → agent_framework_core-1.19.0}/agent_framework/__init__.py

@@ -33,6 +33,7 @@ from ._telemetry import (
 from .exceptions import (
     AgentFrameworkException,
     MiddlewareException,
+    ResponseInvalidatedException,
     UserInputRequiredException,
     WorkflowCheckpointException,
     WorkflowConvergenceException,
@@ -284,6 +285,42 @@ _LAZY_MODULE_EXPORTS: Final[Mapping[str, tuple[str, ...]]] = {
         "validate_tool_mode",
         "validate_tools",
     ),
+    "._in_memory": (
+        "InMemoryCollection",
+        "InMemoryStore",
+    ),
+    "._vector_filters": (
+        "Filter",
+        "FilterGroup",
+        "FilterGroupOperator",
+        "FilterOperator",
+        "Param",
+    ),
+    "._vectors": (
+        "DISTANCE_FUNCTION_DIRECTION_HELPER",
+        "BaseVectorCollection",
+        "BaseVectorSearch",
+        "BaseVectorStore",
+        "DistanceFunction",
+        "FieldTypes",
+        "GenerateVectors",
+        "IndexKind",
+        "SearchResponse",
+        "SearchResults",
+        "SearchType",
+        "SupportsVectorSearch",
+        "SupportsVectorUpsert",
+        "VectorCollectionContextProvider",
+        "VectorStoreCollectionDefinition",
+        "VectorStoreField",
+        "VectorStoreHistoryProvider",
+        "create_delete_tool",
+        "create_get_tool",
+        "create_upsert_tool",
+        "create_vector_search_tool",
+        "register_vectorstoremodel",
+        "vectorstoremodel",
+    ),
     "._workflows._agent": ("WorkflowAgent",),
     "._workflows._agent_executor": ("AgentExecutor", "AgentExecutorRequest", "AgentExecutorResponse"),
     "._workflows._agent_utils": ("resolve_agent_id",),
@@ -343,7 +380,7 @@ _LAZY_MODULE_EXPORTS: Final[Mapping[str, tuple[str, ...]]] = {
         "validate_workflow_graph",
     ),
     "._workflows._viz": ("WorkflowViz",),
-    "._workflows._workflow": ("Workflow", "WorkflowRunResult"),
+    "._workflows._workflow": ("Workflow", "WorkflowInvocationKwargs", "WorkflowRunResult"),
     "._workflows._workflow_builder": ("WorkflowBuilder",),
     "._workflows._workflow_context": ("WorkflowContext",),
     "._workflows._workflow_executor": (
@@ -371,6 +408,7 @@ __all__ = [
     "DEFAULT_MODE_SOURCE_ID",
     "DEFAULT_TODO_SOURCE_ID",
     "DEFAULT_TOOL_APPROVAL_SOURCE_ID",
+    "DISTANCE_FUNCTION_DIRECTION_HELPER",
     "EXCLUDED_KEY",
     "EXCLUDE_REASON_KEY",
     "GROUP_ANNOTATION_KEY",
@@ -412,6 +450,9 @@ __all__ = [
     "BaseAgent",
     "BaseChatClient",
     "BaseEmbeddingClient",
+    "BaseVectorCollection",
+    "BaseVectorSearch",
+    "BaseVectorStore",
     "CachingSkillsSource",
     "Case",
     "CharacterEstimatorTokenizer",
@@ -438,6 +479,7 @@ __all__ = [
     "DeduplicatingSkillsSource",
     "Default",
     "DelegatingSkillsSource",
+    "DistanceFunction",
     "Edge",
     "EdgeCondition",
     "EdgeDuplicationError",
@@ -456,6 +498,7 @@ __all__ = [
     "ExperimentalFeature",
     "FanInEdgeGroup",
     "FanOutEdgeGroup",
+    "FieldTypes",
     "FileAccessProvider",
     "FileCheckpointStorage",
     "FileHistoryProvider",
@@ -468,6 +511,10 @@ __all__ = [
     "FileSkillsSource",
     "FileStoreEntry",
     "FileSystemAgentFileStore",
+    "Filter",
+    "FilterGroup",
+    "FilterGroupOperator",
+    "FilterOperator",
     "FilteringSkillsSource",
     "FinalT",
     "FinishReason",
@@ -482,14 +529,18 @@ __all__ = [
     "FunctionalWorkflow",
     "FunctionalWorkflowAgent",
     "FunctionalWorkflowDefinition",
+    "GenerateVectors",
     "GeneratedEmbeddings",
     "GraphConnectivityError",
     "HistoryProvider",
     "InMemoryAgentFileStore",
     "InMemoryCheckpointStorage",
+    "InMemoryCollection",
     "InMemoryHistoryProvider",
     "InMemorySkillsSource",
+    "InMemoryStore",
     "InProcRunnerContext",
+    "IndexKind",
     "InlineSkill",
     "InlineSkillResource",
     "InlineSkillScript",
@@ -517,8 +568,10 @@ __all__ = [
     "MiddlewareTypes",
     "OuterFinalT",
     "OuterUpdateT",
+    "Param",
     "RawAgent",
     "ReleaseCandidateFeature",
+    "ResponseInvalidatedException",
     "ResponseStream",
     "Role",
     "RoleLiteral",
@@ -527,6 +580,9 @@ __all__ = [
     "Runner",
     "RunnerContext",
     "SamplingApprovalCallback",
+    "SearchResponse",
+    "SearchResults",
+    "SearchType",
     "SecretString",
     "SelectiveToolCallCompactionStrategy",
     "ServiceSessionId",
@@ -555,6 +611,8 @@ __all__ = [
     "SupportsImageGenerationTool",
     "SupportsMCPTool",
     "SupportsShellTool",
+    "SupportsVectorSearch",
+    "SupportsVectorUpsert",
     "SupportsWebSearchTool",
     "SwitchCaseEdgeGroup",
     "SwitchCaseEdgeGroupCase",
@@ -580,6 +638,10 @@ __all__ = [
     "UsageDetails",
     "UserInputRequiredException",
     "ValidationTypeEnum",
+    "VectorCollectionContextProvider",
+    "VectorStoreCollectionDefinition",
+    "VectorStoreField",
+    "VectorStoreHistoryProvider",
     "Workflow",
     "WorkflowAgent",
     "WorkflowBuilder",
@@ -593,6 +655,7 @@ __all__ = [
     "WorkflowEventType",
     "WorkflowException",
     "WorkflowExecutor",
+    "WorkflowInvocationKwargs",
     "WorkflowMessage",
     "WorkflowRunResult",
     "WorkflowRunState",
@@ -611,8 +674,12 @@ __all__ = [
     "create_agent_hooks_middleware_from_emitter",
     "create_always_approve_tool_response",
     "create_always_approve_tool_with_arguments_response",
+    "create_delete_tool",
     "create_edge_runner",
+    "create_get_tool",
     "create_harness_agent",
+    "create_upsert_tool",
+    "create_vector_search_tool",
     "detect_media_type_from_base64",
     "enqueue_messages",
     "evaluate_agent",
@@ -636,6 +703,7 @@ __all__ = [
     "prepend_instructions_to_messages",
     "register_checkpoint_type",
     "register_state_type",
+    "register_vectorstoremodel",
     "resolve_agent_id",
     "response_handler",
     "set_agent_mode",
@@ -650,6 +718,7 @@ __all__ = [
     "validate_tool_mode",
     "validate_tools",
     "validate_workflow_graph",
+    "vectorstoremodel",
     "workflow",
 ]
 

{agent_framework_core-1.17.0 → agent_framework_core-1.19.0}/agent_framework/__init__.pyi

@@ -123,6 +123,7 @@ from ._harness._tool_approval import (
     create_always_approve_tool_response,
     create_always_approve_tool_with_arguments_response,
 )
+from ._in_memory import InMemoryCollection, InMemoryStore
 from ._mcp import (
     MCPStdioTool,
     MCPStreamableHTTPTool,
@@ -250,6 +251,32 @@ from ._types import (
     validate_tool_mode,
     validate_tools,
 )
+from ._vector_filters import Filter, FilterGroup, FilterGroupOperator, FilterOperator, Param
+from ._vectors import (
+    DISTANCE_FUNCTION_DIRECTION_HELPER,
+    BaseVectorCollection,
+    BaseVectorSearch,
+    BaseVectorStore,
+    DistanceFunction,
+    FieldTypes,
+    GenerateVectors,
+    IndexKind,
+    SearchResponse,
+    SearchResults,
+    SearchType,
+    SupportsVectorSearch,
+    SupportsVectorUpsert,
+    VectorCollectionContextProvider,
+    VectorStoreCollectionDefinition,
+    VectorStoreField,
+    VectorStoreHistoryProvider,
+    create_delete_tool,
+    create_get_tool,
+    create_upsert_tool,
+    create_vector_search_tool,
+    register_vectorstoremodel,
+    vectorstoremodel,
+)
 from ._workflows._agent import WorkflowAgent
 from ._workflows._agent_executor import AgentExecutor, AgentExecutorRequest, AgentExecutorResponse
 from ._workflows._agent_utils import resolve_agent_id
@@ -306,13 +333,14 @@ from ._workflows._validation import (
     validate_workflow_graph,
 )
 from ._workflows._viz import WorkflowViz
-from ._workflows._workflow import Workflow, WorkflowRunResult
+from ._workflows._workflow import Workflow, WorkflowInvocationKwargs, WorkflowRunResult
 from ._workflows._workflow_builder import WorkflowBuilder
 from ._workflows._workflow_context import WorkflowContext
 from ._workflows._workflow_executor import SubWorkflowRequestMessage, SubWorkflowResponseMessage, WorkflowExecutor
 from .exceptions import (
     AgentFrameworkException,
     MiddlewareException,
+    ResponseInvalidatedException,
     UserInputRequiredException,
     WorkflowCheckpointException,
     WorkflowConvergenceException,
@@ -335,6 +363,7 @@ __all__ = [
     "DEFAULT_MODE_SOURCE_ID",
     "DEFAULT_TODO_SOURCE_ID",
     "DEFAULT_TOOL_APPROVAL_SOURCE_ID",
+    "DISTANCE_FUNCTION_DIRECTION_HELPER",
     "EXCLUDED_KEY",
     "EXCLUDE_REASON_KEY",
     "GROUP_ANNOTATION_KEY",
@@ -376,6 +405,9 @@ __all__ = [
     "BaseAgent",
     "BaseChatClient",
     "BaseEmbeddingClient",
+    "BaseVectorCollection",
+    "BaseVectorSearch",
+    "BaseVectorStore",
     "CachingSkillsSource",
     "Case",
     "CharacterEstimatorTokenizer",
@@ -402,6 +434,7 @@ __all__ = [
     "DeduplicatingSkillsSource",
     "Default",
     "DelegatingSkillsSource",
+    "DistanceFunction",
     "Edge",
     "EdgeCondition",
     "EdgeDuplicationError",
@@ -420,6 +453,7 @@ __all__ = [
     "ExperimentalFeature",
     "FanInEdgeGroup",
     "FanOutEdgeGroup",
+    "FieldTypes",
     "FileAccessProvider",
     "FileCheckpointStorage",
     "FileHistoryProvider",
@@ -432,6 +466,10 @@ __all__ = [
     "FileSkillsSource",
     "FileStoreEntry",
     "FileSystemAgentFileStore",
+    "Filter",
+    "FilterGroup",
+    "FilterGroupOperator",
+    "FilterOperator",
     "FilteringSkillsSource",
     "FinalT",
     "FinishReason",
@@ -446,14 +484,18 @@ __all__ = [
     "FunctionalWorkflow",
     "FunctionalWorkflowAgent",
     "FunctionalWorkflowDefinition",
+    "GenerateVectors",
     "GeneratedEmbeddings",
     "GraphConnectivityError",
     "HistoryProvider",
     "InMemoryAgentFileStore",
     "InMemoryCheckpointStorage",
+    "InMemoryCollection",
     "InMemoryHistoryProvider",
     "InMemorySkillsSource",
+    "InMemoryStore",
     "InProcRunnerContext",
+    "IndexKind",
     "InlineSkill",
     "InlineSkillResource",
     "InlineSkillScript",
@@ -481,8 +523,10 @@ __all__ = [
     "MiddlewareTypes",
     "OuterFinalT",
     "OuterUpdateT",
+    "Param",
     "RawAgent",
     "ReleaseCandidateFeature",
+    "ResponseInvalidatedException",
     "ResponseStream",
     "Role",
     "RoleLiteral",
@@ -491,6 +535,9 @@ __all__ = [
     "Runner",
     "RunnerContext",
     "SamplingApprovalCallback",
+    "SearchResponse",
+    "SearchResults",
+    "SearchType",
     "SecretString",
     "SelectiveToolCallCompactionStrategy",
     "ServiceSessionId",
@@ -519,6 +566,8 @@ __all__ = [
     "SupportsImageGenerationTool",
     "SupportsMCPTool",
     "SupportsShellTool",
+    "SupportsVectorSearch",
+    "SupportsVectorUpsert",
     "SupportsWebSearchTool",
     "SwitchCaseEdgeGroup",
     "SwitchCaseEdgeGroupCase",
@@ -544,6 +593,10 @@ __all__ = [
     "UsageDetails",
     "UserInputRequiredException",
     "ValidationTypeEnum",
+    "VectorCollectionContextProvider",
+    "VectorStoreCollectionDefinition",
+    "VectorStoreField",
+    "VectorStoreHistoryProvider",
     "Workflow",
     "WorkflowAgent",
     "WorkflowBuilder",
@@ -557,6 +610,7 @@ __all__ = [
     "WorkflowEventType",
     "WorkflowException",
     "WorkflowExecutor",
+    "WorkflowInvocationKwargs",
     "WorkflowMessage",
     "WorkflowRunResult",
     "WorkflowRunState",
@@ -575,8 +629,12 @@ __all__ = [
     "create_agent_hooks_middleware_from_emitter",
     "create_always_approve_tool_response",
     "create_always_approve_tool_with_arguments_response",
+    "create_delete_tool",
     "create_edge_runner",
+    "create_get_tool",
     "create_harness_agent",
+    "create_upsert_tool",
+    "create_vector_search_tool",
     "detect_media_type_from_base64",
     "enqueue_messages",
     "evaluate_agent",
@@ -600,6 +658,7 @@ __all__ = [
     "prepend_instructions_to_messages",
     "register_checkpoint_type",
     "register_state_type",
+    "register_vectorstoremodel",
     "resolve_agent_id",
     "response_handler",
     "set_agent_mode",
@@ -614,5 +673,6 @@ __all__ = [
     "validate_tool_mode",
     "validate_tools",
     "validate_workflow_graph",
+    "vectorstoremodel",
     "workflow",
 ]

{agent_framework_core-1.17.0 → agent_framework_core-1.19.0}/agent_framework/_agents.py

@@ -1405,8 +1405,10 @@ class RawAgent(BaseAgent, Generic[OptionsCoT]):
             self.context_providers.append(InMemoryHistoryProvider())
 
         active_session = session
+        framework_created_session = False
         if active_session is None and self.context_providers:
             active_session = AgentSession()
+            framework_created_session = True
 
         per_service_call_history_providers = self._resolve_per_service_call_history_providers(
             session=active_session,
@@ -1455,12 +1457,22 @@ class RawAgent(BaseAgent, Generic[OptionsCoT]):
         # Normalize tools
         normalized_tools = _normalize_tools(tools_)
 
+        # Extract additional function arguments
+        effective_function_invocation_kwargs = (
+            dict(function_invocation_kwargs) if function_invocation_kwargs is not None else {}
+        )
+        additional_function_arguments = {**effective_function_invocation_kwargs, **existing_additional_args}
+
         # Resolve final tool list (configured tools + runtime provided tools + local MCP server tools)
         final_tools = list(base_tools)
         for tool in normalized_tools:
             if isinstance(tool, MCPTool):
+                await tool._prepare_for_run(additional_function_arguments)  # pyright: ignore[reportPrivateUsage]
                 if not tool.is_connected:
+                    # The handshake and discovery requests are issued before any tool call, so the run's
+                    # kwargs must reach header_provider here or those requests go out unauthenticated.
                     await self._async_exit_stack.enter_async_context(tool)
+                    await tool._prepare_for_run(additional_function_arguments)  # pyright: ignore[reportPrivateUsage]
                 _append_unique_tools(
                     final_tools,
                     tool.functions,
@@ -1470,19 +1482,18 @@ class RawAgent(BaseAgent, Generic[OptionsCoT]):
                 _append_unique_tools(final_tools, [tool])
 
         for mcp_server in self.mcp_tools:
+            await mcp_server._prepare_for_run(additional_function_arguments)  # pyright: ignore[reportPrivateUsage]
             if not mcp_server.is_connected:
                 await self._async_exit_stack.enter_async_context(mcp_server)
+                await mcp_server._prepare_for_run(  # pyright: ignore[reportPrivateUsage]
+                    additional_function_arguments
+                )
             _append_unique_tools(
                 final_tools,
                 mcp_server.functions,
                 duplicate_error_message=mcp_duplicate_message,
             )
 
-        effective_function_invocation_kwargs = (
-            dict(function_invocation_kwargs) if function_invocation_kwargs is not None else {}
-        )
-        additional_function_arguments = {**effective_function_invocation_kwargs, **existing_additional_args}
-
         model = opts.pop("model", None)
 
         # Build options dict from run() options merged with provided options
@@ -1520,8 +1531,12 @@ class RawAgent(BaseAgent, Generic[OptionsCoT]):
         session_messages: list[Message] = session_context.get_messages(include_input=True)
 
         effective_client_kwargs = dict(client_kwargs) if client_kwargs is not None else {}
+        from ._tools import _APPROVAL_SESSION_IS_AUTHORITATIVE_KEY  # pyright: ignore[reportPrivateUsage]
+
+        effective_client_kwargs.pop(_APPROVAL_SESSION_IS_AUTHORITATIVE_KEY, None)
         if active_session is not None:
             effective_client_kwargs["session"] = active_session
+            effective_client_kwargs[_APPROVAL_SESSION_IS_AUTHORITATIVE_KEY] = not framework_created_session
         per_service_call_history_middleware: PerServiceCallHistoryPersistingMiddleware | None = None
         if per_service_call_history_providers and active_session is not None:
             per_service_call_history_middleware = PerServiceCallHistoryPersistingMiddleware(
@@ -1712,7 +1727,7 @@ class RawAgent(BaseAgent, Generic[OptionsCoT]):
                     logger.error("Failed to send log message to server: %s", e)
 
         @server.list_tools()
-        async def _list_tools() -> list[types.Tool]:  # type: ignore
+        async def _list_tools() -> list[types.Tool]:
             """List all tools in the agent."""
             schema = agent_tool.parameters()
 
@@ -1726,7 +1741,7 @@ class RawAgent(BaseAgent, Generic[OptionsCoT]):
             return [tool]
 
         @server.call_tool()
-        async def _call_tool(  # type: ignore
+        async def _call_tool(
             name: str, arguments: dict[str, Any]
         ) -> Sequence[types.TextContent | types.ImageContent | types.AudioContent | types.EmbeddedResource]:
             """Call a tool in the agent."""
@@ -1769,7 +1784,7 @@ class RawAgent(BaseAgent, Generic[OptionsCoT]):
             return mcp_content or [types.TextContent(type="text", text="")]
 
         @server.set_logging_level()
-        async def _set_logging_level(level: types.LoggingLevel) -> None:  # type: ignore
+        async def _set_logging_level(level: types.LoggingLevel) -> None:
             """Set the logging level for the server."""
             logger.setLevel(LOG_LEVEL_MAPPING[level])
             # emit this log with the new minimum level