@google/adk 1.2.0 → 1.4.0

package/dist/web/utils/streaming_utils.js

@@ -78,6 +78,7 @@ import { JSONPath } from "jsonpath-plus";
 import { generateClientFunctionCallId } from "../agents/functions.js";
 import { FeatureName, isFeatureEnabled } from "../features/feature_registry.js";
 import { createLlmResponse } from "../models/llm_response.js";
+const UNSAFE_PROPERTY_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
 class ProgressiveStrategy {
   constructor() {
     this.partsSequence = [];
@@ -144,10 +145,13 @@ class ProgressiveStrategy {
     const pathParts = JSONPath.toPathArray(jsonPath).filter(
       (p) => p !== "$" && p !== "$["
     );
+    if (pathParts.some((part) => UNSAFE_PROPERTY_KEYS.has(String(part)))) {
+      return;
+    }
     let current = this.currentFcArgs;
     for (let i = 0; i < pathParts.length - 1; i++) {
       const part = pathParts[i];
-      if (!(part in current)) {
+      if (!Object.prototype.hasOwnProperty.call(current, part)) {
         current[part] = {};
       }
       current = current[part];
@@ -342,7 +346,6 @@ class StreamingResponseAggregator {
   )) {
     this.isProgressiveMode = isProgressiveMode;
     this.lastThoughtSignature = {};
-    this.sawFunctionCall = false;
     this.strategy = this.isProgressiveMode ? new ProgressiveStrategy() : new NonProgressiveStrategy();
   }
   processResponse(response) {
@@ -350,10 +353,7 @@ class StreamingResponseAggregator {
       var _a, _b;
       const llmResponse = createLlmResponse(response);
       const parts = (_b = (_a = llmResponse.content) == null ? void 0 : _a.parts) != null ? _b : [];
-      if (parts.some((part) => part.functionCall)) {
-        this.sawFunctionCall = true;
-      }
-      if (this.sawFunctionCall && llmResponse.finishReason === FinishReason.STOP && parts.length > 0 && parts.every(isEmptyContentPart)) {
+      if (parts.every(isEmptyContentPart) && (llmResponse.finishReason === void 0 || llmResponse.finishReason === FinishReason.STOP)) {
         if (llmResponse.usageMetadata) {
           this.usageMetadata = llmResponse.usageMetadata;
         }
@@ -394,16 +394,23 @@ class StreamingResponseAggregator {
   close() {
     var _a, _b, _c;
     const finalParts = this.strategy.close();
-    if (!finalParts) {
+    const hasMetadata = this.usageMetadata !== void 0 || this.groundingMetadata !== void 0 || this.citationMetadata !== void 0;
+    if (!finalParts && !hasMetadata) {
       return void 0;
     }
     const candidate = (_b = (_a = this.response) == null ? void 0 : _a.candidates) == null ? void 0 : _b[0];
     const finishReason = (_c = this.finishReason) != null ? _c : candidate == null ? void 0 : candidate.finishReason;
     return {
-      content: {
-        role: "model",
-        parts: finalParts
-      },
+      // Only attach a model `content` when there are actual parts to emit. When
+      // the turn accumulated no parts (e.g. a function call that was already
+      // flushed, followed by a trailing STOP chunk that carries only usage
+      // metadata) we still surface that trailing metadata, but MUST NOT emit
+      // `content: { parts: [] }`. An empty-parts model turn corrupts the session
+      // history: on the next request the Vertex AI backend rejects the whole
+      // call with HTTP 400 "Unable to submit request because it must include at
+      // least one parts field", which breaks multi-turn tool-using sessions
+      // right after the first tool call (google/adk-js#21, #22).
+      content: finalParts ? { role: "model", parts: finalParts } : void 0,
       groundingMetadata: this.groundingMetadata,
       citationMetadata: this.citationMetadata,
       errorCode: finishReason === FinishReason.STOP ? void 0 : finishReason,

package/dist/web/utils/task.js

@@ -0,0 +1,34 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+class Task {
+  constructor(executable) {
+    this.executable = executable;
+    this.isDone = false;
+    this.abortController = new AbortController();
+    const markDone = () => {
+      this.isDone = true;
+    };
+    this.promise = executable(this.abortController.signal);
+    this.promise.then(markDone).catch(markDone);
+  }
+  /**
+   * Cancels the task execution.
+   */
+  cancel() {
+    this.abortController.abort();
+  }
+  /**
+   * Returns true if the task has completed (either resolved or rejected).
+   */
+  done() {
+    return this.isDone;
+  }
+}
+export {
+  Task
+};

package/dist/web/version.js

@@ -5,7 +5,7 @@ const require = topLevelCreateRequire(import.meta.url);
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-const version = "1.2.0";
+const version = "1.4.0";
 export {
   version
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@google/adk",
-  "version": "1.2.0",
+  "version": "1.4.0",
   "description": "Google ADK JS",
   "author": "Google",
   "license": "Apache-2.0",
@@ -45,7 +45,7 @@
     "@google-cloud/opentelemetry-cloud-trace-exporter": "^3.0.0",
     "@google-cloud/storage": "^7.17.1",
     "@google-cloud/vertexai": "^1.12.0",
-    "@google/genai": "^1.37.0",
+    "@google/genai": "^2.9.0",
     "@mikro-orm/core": "^6.6.10",
     "@mikro-orm/reflection": "^6.6.6",
     "@modelcontextprotocol/sdk": "^1.26.0",
@@ -60,6 +60,7 @@
     "@opentelemetry/sdk-metrics": "^2.1.0",
     "@opentelemetry/sdk-trace-base": "^2.1.0",
     "@opentelemetry/sdk-trace-node": "^2.1.0",
+    "adm-zip": "^0.5.17",
     "express": "^4.22.1",
     "google-auth-library": "^10.3.0",
     "js-yaml": "^4.1.1",
@@ -71,6 +72,7 @@
   },
   "devDependencies": {
     "@mikro-orm/sqlite": "^6.6.6",
+    "@types/adm-zip": "^0.5.8",
     "@types/express": "^4.17.25",
     "@types/lodash-es": "^4.17.12",
     "openapi-types": "^12.1.3"