@google/adk 1.4.0 → 1.5.0

package/dist/web/tools/skill/run_skill_inline_script_tool.js

@@ -21,6 +21,15 @@ import { CodeExecutionLanguage } from "../../code_executors/code_execution_utils
 import { experimental } from "../../utils/experimental.js";
 import { materializeFiles } from "../../utils/file_utils.js";
 import { BaseTool } from "../base_tool.js";
+var RunSkillInlineScriptErrorCode = /* @__PURE__ */ ((RunSkillInlineScriptErrorCode2) => {
+  RunSkillInlineScriptErrorCode2["MISSING_SCRIPT_CONTENT"] = "MISSING_SCRIPT_CONTENT";
+  RunSkillInlineScriptErrorCode2["MISSING_LANGUAGE"] = "MISSING_LANGUAGE";
+  RunSkillInlineScriptErrorCode2["NO_CODE_EXECUTOR"] = "NO_CODE_EXECUTOR";
+  RunSkillInlineScriptErrorCode2["EXECUTION_ERROR"] = "EXECUTION_ERROR";
+  RunSkillInlineScriptErrorCode2["CONFIRMATION_REJECTED"] = "CONFIRMATION_REJECTED";
+  return RunSkillInlineScriptErrorCode2;
+})(RunSkillInlineScriptErrorCode || {});
+const REQUIRE_CONFIRMATION_MESSAGE = "This tool call needs external confirmation before completion.";
 let RunSkillInlineScriptTool = class extends BaseTool {
   constructor(toolset) {
     super({
@@ -70,13 +79,13 @@ let RunSkillInlineScriptTool = class extends BaseTool {
     if (!inlineScriptContent) {
       return {
         error: "Script content is required.",
-        errorCode: "MISSING_SCRIPT_CONTENT"
+        errorCode: "MISSING_SCRIPT_CONTENT" /* MISSING_SCRIPT_CONTENT */
       };
     }
     if (!language) {
       return {
         error: "Language is required.",
-        errorCode: "MISSING_LANGUAGE"
+        errorCode: "MISSING_LANGUAGE" /* MISSING_LANGUAGE */
       };
     }
     let codeExecutor = (_a = this.toolset) == null ? void 0 : _a.codeExecutor;
@@ -89,9 +98,17 @@ let RunSkillInlineScriptTool = class extends BaseTool {
     if (!codeExecutor) {
       return {
         error: "No code executor configured.",
-        errorCode: "NO_CODE_EXECUTOR"
+        errorCode: "NO_CODE_EXECUTOR" /* NO_CODE_EXECUTOR */
       };
     }
+    const confirmationResult = this.enforceConfirmation(
+      toolContext,
+      inlineScriptContent,
+      language
+    );
+    if (confirmationResult) {
+      return confirmationResult;
+    }
     try {
       const result = await codeExecutor.executeCode({
         invocationContext: toolContext.invocationContext,
@@ -107,14 +124,44 @@ let RunSkillInlineScriptTool = class extends BaseTool {
     } catch (e) {
       return {
         error: "Failed to execute inline script: ".concat(e.message),
-        errorCode: "EXECUTION_ERROR"
+        errorCode: "EXECUTION_ERROR" /* EXECUTION_ERROR */
+      };
+    }
+  }
+  /**
+   * Enforces a human-in-the-loop confirmation gate before executing an inline
+   * script, using the repo's standard tool-confirmation mechanism.
+   *
+   * - When no confirmation has been provided yet, a confirmation is requested
+   *   (surfacing the language and script that would run) and an intermediate
+   *   result is returned so the tool call pauses until the client responds.
+   * - When a confirmation exists but was not confirmed, a rejection error is
+   *   returned and execution is refused.
+   * - When the confirmation is confirmed, `undefined` is returned to allow the
+   *   caller to proceed with execution.
+   */
+  enforceConfirmation(toolContext, scriptContent, language) {
+    const confirmation = toolContext.toolConfirmation;
+    if (!confirmation) {
+      toolContext.requestConfirmation({
+        hint: "Confirmation is required before executing an inline skill script. " + "The agent requested to run the following ".concat(language, " script in the ") + "code executor. Only approve if you trust its contents:\n\n" + scriptContent,
+        payload: { language, scriptContent }
+      });
+      return { partial: REQUIRE_CONFIRMATION_MESSAGE };
+    }
+    if (!confirmation.confirmed) {
+      return {
+        error: "Inline script execution was not confirmed and was rejected.",
+        errorCode: "CONFIRMATION_REJECTED" /* CONFIRMATION_REJECTED */
       };
     }
+    return void 0;
   }
 };
 RunSkillInlineScriptTool = __decorateClass([
   experimental
 ], RunSkillInlineScriptTool);
 export {
+  RunSkillInlineScriptErrorCode,
   RunSkillInlineScriptTool
 };

package/dist/web/tools/skill/skill_toolset.js

@@ -41,9 +41,11 @@ let SkillToolset = class extends BaseToolset {
       new ListSkillsTool(this),
       new LoadSkillTool(this),
       new LoadSkillResourceTool(this),
-      new RunSkillScriptTool(this),
-      new RunSkillInlineScriptTool(this)
+      new RunSkillScriptTool(this)
     ];
+    if (options.allowInlineScripts) {
+      this.tools.push(new RunSkillInlineScriptTool(this));
+    }
     if (this.registry) {
       this.tools.push(new SearchSkillsTool(this));
     }

package/dist/web/utils/branch_trie.js

@@ -0,0 +1,13 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+function isSegmentPrefix(currentBranch, targetBranch) {
+  return !targetBranch || targetBranch === currentBranch || !!currentBranch && currentBranch.startsWith("".concat(targetBranch, "."));
+}
+export {
+  isSegmentPrefix
+};

package/dist/web/utils/streaming_utils.js

@@ -75,7 +75,7 @@ import {
   FinishReason
 } from "@google/genai";
 import { JSONPath } from "jsonpath-plus";
-import { generateClientFunctionCallId } from "../agents/functions.js";
+import { generateClientFunctionCallId } from "../events/event.js";
 import { FeatureName, isFeatureEnabled } from "../features/feature_registry.js";
 import { createLlmResponse } from "../models/llm_response.js";
 const UNSAFE_PROPERTY_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);

package/dist/web/version.js

@@ -5,7 +5,7 @@ const require = topLevelCreateRequire(import.meta.url);
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-const version = "1.4.0";
+const version = "1.5.0";
 export {
   version
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@google/adk",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "Google ADK JS",
   "author": "Google",
   "license": "Apache-2.0",