@google/adk 1.4.0 → 1.6.0

package/dist/cjs/context/token_based_context_compactor.js

@@ -29,6 +29,7 @@ __export(token_based_context_compactor_exports, {
 module.exports = __toCommonJS(token_based_context_compactor_exports);
 var import_content_processor_utils = require("../agents/processors/content_processor_utils.js");
 var import_compacted_event = require("../events/compacted_event.js");
+var import_compaction_utils = require("./compaction_utils.js");
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -41,31 +42,20 @@ class TokenBasedContextCompactor {
     this.eventRetentionSize = options.eventRetentionSize;
     this.summarizer = options.summarizer;
   }
-  getActiveEvents(events) {
-    let latestCompactedEvent = void 0;
-    for (let i = events.length - 1; i >= 0; i--) {
-      const e = events[i];
-      if ((0, import_compacted_event.isCompactedEvent)(e)) {
-        if (!latestCompactedEvent || e.endTime > latestCompactedEvent.endTime) {
-          latestCompactedEvent = e;
-        }
-      }
-    }
-    if (!latestCompactedEvent) {
-      return events;
-    }
-    const activeRawEvents = events.filter(
-      (e) => !(0, import_compacted_event.isCompactedEvent)(e) && e.timestamp > latestCompactedEvent.endTime
-    );
-    return [latestCompactedEvent, ...activeRawEvents];
-  }
   shouldCompact(invocationContext) {
     const events = invocationContext.session.events;
-    const activeEvents = this.getActiveEvents(events);
+    const activeEvents = (0, import_compaction_utils.getActiveEvents)(events);
     const rawEvents = activeEvents.filter((e) => !(0, import_compacted_event.isCompactedEvent)(e));
     if (rawEvents.length <= this.eventRetentionSize) {
       return false;
     }
+    const retainStartIndex = (0, import_compaction_utils.calculateRetainStartIndex)(
+      rawEvents,
+      this.eventRetentionSize
+    );
+    if (retainStartIndex === 0) {
+      return false;
+    }
     const promptTokenCount = latestPromptTokenCount(
       activeEvents,
       invocationContext
@@ -77,24 +67,15 @@ class TokenBasedContextCompactor {
   }
   async compact(invocationContext) {
     const events = invocationContext.session.events;
-    const activeEvents = this.getActiveEvents(events);
+    const activeEvents = (0, import_compaction_utils.getActiveEvents)(events);
     const rawEvents = activeEvents.filter((e) => !(0, import_compacted_event.isCompactedEvent)(e));
     if (rawEvents.length <= this.eventRetentionSize) {
       return;
     }
-    let retainStartIndex = Math.max(
-      0,
-      rawEvents.length - this.eventRetentionSize
+    const retainStartIndex = (0, import_compaction_utils.calculateRetainStartIndex)(
+      rawEvents,
+      this.eventRetentionSize
     );
-    while (retainStartIndex > 0) {
-      const eventToRetain = rawEvents[retainStartIndex];
-      const previousEvent = rawEvents[retainStartIndex - 1];
-      if (hasFunctionResponse(eventToRetain) && hasFunctionCall(previousEvent)) {
-        retainStartIndex--;
-      } else {
-        break;
-      }
-    }
     if (retainStartIndex === 0) {
       return;
     }
@@ -149,18 +130,6 @@ function estimatePromptTokenCount(activeEvents, invocationContext) {
   }
   return Math.ceil(totalChars / CHARS_PER_TOKEN);
 }
-function hasFunctionCall(event) {
-  var _a, _b;
-  return !!((_b = (_a = event.content) == null ? void 0 : _a.parts) == null ? void 0 : _b.some(
-    (part) => part.functionCall !== void 0
-  ));
-}
-function hasFunctionResponse(event) {
-  var _a, _b;
-  return !!((_b = (_a = event.content) == null ? void 0 : _a.parts) == null ? void 0 : _b.some(
-    (part) => part.functionResponse !== void 0
-  ));
-}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   TokenBasedContextCompactor

package/dist/cjs/events/compacted_event.js

@@ -25,7 +25,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var compacted_event_exports = {};
 __export(compacted_event_exports, {
   createCompactedEvent: () => createCompactedEvent,
-  isCompactedEvent: () => isCompactedEvent
+  isCompactedEvent: () => isCompactedEvent,
+  isScratchpadEvent: () => isScratchpadEvent
 });
 module.exports = __toCommonJS(compacted_event_exports);
 var import_event = require("./event.js");
@@ -37,17 +38,22 @@ var import_event = require("./event.js");
 function isCompactedEvent(event) {
   return "isCompacted" in event && event.isCompacted === true;
 }
+function isScratchpadEvent(event) {
+  return isCompactedEvent(event) && event.isScratchpad === true;
+}
 function createCompactedEvent(params = {}) {
   return {
     ...(0, import_event.createEvent)(params),
     isCompacted: params.isCompacted || true,
     startTime: params.startTime,
     endTime: params.endTime,
-    compactedContent: params.compactedContent
+    compactedContent: params.compactedContent,
+    isScratchpad: params.isScratchpad
   };
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   createCompactedEvent,
-  isCompactedEvent
+  isCompactedEvent,
+  isScratchpadEvent
 });

package/dist/cjs/events/event.js

@@ -24,19 +24,24 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var event_exports = {};
 __export(event_exports, {
+  AF_FUNCTION_CALL_ID_PREFIX: () => AF_FUNCTION_CALL_ID_PREFIX,
   createEvent: () => createEvent,
   createNewEventId: () => createNewEventId,
+  generateClientFunctionCallId: () => generateClientFunctionCallId,
+  getEventTokens: () => getEventTokens,
   getFunctionCalls: () => getFunctionCalls,
   getFunctionResponses: () => getFunctionResponses,
   hasThoughts: () => hasThoughts,
   hasTrailingCodeExecutionResult: () => hasTrailingCodeExecutionResult,
   isFinalResponse: () => isFinalResponse,
+  populateClientFunctionCallId: () => populateClientFunctionCallId,
   pruneThoughts: () => pruneThoughts,
   stringifyContent: () => stringifyContent,
   transformToCamelCaseEvent: () => transformToCamelCaseEvent,
   transformToSnakeCaseEvent: () => transformToSnakeCaseEvent
 });
 module.exports = __toCommonJS(event_exports);
+var import_env_aware_utils = require("../utils/env_aware_utils.js");
 var import_object_notation_utils = require("../utils/object_notation_utils.js");
 var import_event_actions = require("./event_actions.js");
 /**
@@ -73,6 +78,17 @@ function getFunctionCalls(event) {
   }
   return funcCalls;
 }
+const AF_FUNCTION_CALL_ID_PREFIX = "adk-";
+function generateClientFunctionCallId() {
+  return `${AF_FUNCTION_CALL_ID_PREFIX}${(0, import_env_aware_utils.randomUUID)()}`;
+}
+function populateClientFunctionCallId(modelResponseEvent) {
+  for (const functionCall of getFunctionCalls(modelResponseEvent)) {
+    if (!functionCall.id) {
+      functionCall.id = generateClientFunctionCallId();
+    }
+  }
+}
 function getFunctionResponses(event) {
   const funcResponses = [];
   if (event.content && event.content.parts) {
@@ -102,6 +118,14 @@ function stringifyContent(event) {
     return (_a2 = part.text) != null ? _a2 : "";
   }).join("");
 }
+function getEventTokens(event) {
+  var _a;
+  if (((_a = event.usageMetadata) == null ? void 0 : _a.promptTokenCount) !== void 0) {
+    return event.usageMetadata.promptTokenCount;
+  }
+  const contentStr = stringifyContent(event);
+  return Math.ceil(contentStr.length / 4);
+}
 function hasThoughts(event) {
   var _a, _b;
   return !!((_b = (_a = event.content) == null ? void 0 : _a.parts) == null ? void 0 : _b.some((part) => part.thought === true));
@@ -158,13 +182,17 @@ function transformToSnakeCaseEvent(event) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  AF_FUNCTION_CALL_ID_PREFIX,
   createEvent,
   createNewEventId,
+  generateClientFunctionCallId,
+  getEventTokens,
   getFunctionCalls,
   getFunctionResponses,
   hasThoughts,
   hasTrailingCodeExecutionResult,
   isFinalResponse,
+  populateClientFunctionCallId,
   pruneThoughts,
   stringifyContent,
   transformToCamelCaseEvent,

package/dist/cjs/index.js

@@ -34,10 +34,12 @@ __export(index_exports, {
   GcsArtifactService: () => import_gcs_artifact_service.GcsArtifactService,
   InvocationContext: () => import_invocation_context.InvocationContext,
   RemoteA2AAgent: () => import_a2a_remote_agent.RemoteA2AAgent,
+  RunSkillInlineScriptErrorCode: () => import_run_skill_inline_script_tool.RunSkillInlineScriptErrorCode,
   RunSkillInlineScriptTool: () => import_run_skill_inline_script_tool.RunSkillInlineScriptTool,
   RunSkillScriptTool: () => import_run_skill_script_tool.RunSkillScriptTool,
   UnsafeLocalCodeExecutor: () => import_unsafe_local_code_executor.UnsafeLocalCodeExecutor,
   VertexAiSessionService: () => import_vertex_ai_session_service.VertexAiSessionService,
+  bearerTokenUserBuilder: () => import_auth.bearerTokenUserBuilder,
   getA2AAgentCard: () => import_agent_card.getA2AAgentCard,
   getArtifactServiceFromUri: () => import_registry.getArtifactServiceFromUri,
   getSessionServiceFromUri: () => import_registry2.getSessionServiceFromUri,
@@ -51,6 +53,7 @@ var import_a2a_remote_agent = require("./a2a/a2a_remote_agent.js");
 var import_agent_card = require("./a2a/agent_card.js");
 var import_agent_executor = require("./a2a/agent_executor.js");
 var import_agent_to_a2a = require("./a2a/agent_to_a2a.js");
+var import_auth = require("./a2a/auth.js");
 var import_invocation_context = require("./agents/invocation_context.js");
 var import_file_artifact_service = require("./artifacts/file_artifact_service.js");
 var import_gcs_artifact_service = require("./artifacts/gcs_artifact_service.js");
@@ -68,6 +71,7 @@ var import_run_skill_script_tool = require("./tools/skill/run_skill_script_tool.
 __reExport(index_exports, require("./integrations/agent_registry/agent_registry.js"), module.exports);
 __reExport(index_exports, require("./telemetry/google_cloud.js"), module.exports);
 __reExport(index_exports, require("./telemetry/setup.js"), module.exports);
+__reExport(index_exports, require("./tools/mcp/load_mcp_resource_tool.js"), module.exports);
 __reExport(index_exports, require("./tools/mcp/mcp_session_manager.js"), module.exports);
 __reExport(index_exports, require("./tools/mcp/mcp_tool.js"), module.exports);
 __reExport(index_exports, require("./tools/mcp/mcp_toolset.js"), module.exports);
@@ -87,10 +91,12 @@ __reExport(index_exports, require("./tools/mcp/mcp_toolset.js"), module.exports)
   GcsArtifactService,
   InvocationContext,
   RemoteA2AAgent,
+  RunSkillInlineScriptErrorCode,
   RunSkillInlineScriptTool,
   RunSkillScriptTool,
   UnsafeLocalCodeExecutor,
   VertexAiSessionService,
+  bearerTokenUserBuilder,
   getA2AAgentCard,
   getArtifactServiceFromUri,
   getSessionServiceFromUri,
@@ -102,6 +108,7 @@ __reExport(index_exports, require("./tools/mcp/mcp_toolset.js"), module.exports)
   ...require("./integrations/agent_registry/agent_registry.js"),
   ...require("./telemetry/google_cloud.js"),
   ...require("./telemetry/setup.js"),
+  ...require("./tools/mcp/load_mcp_resource_tool.js"),
   ...require("./tools/mcp/mcp_session_manager.js"),
   ...require("./tools/mcp/mcp_tool.js"),
   ...require("./tools/mcp/mcp_toolset.js")

package/dist/cjs/integrations/agent_registry/agent_registry_mcp_toolset.js

@@ -30,6 +30,7 @@ module.exports = __toCommonJS(agent_registry_mcp_toolset_exports);
 var import_base_toolset = require("../../tools/base_toolset.js");
 var import_mcp_session_manager = require("../../tools/mcp/mcp_session_manager.js");
 var import_mcp_tool = require("../../tools/mcp/mcp_tool.js");
+var import_logger = require("../../utils/logger.js");
 var import_types2 = require("./types.js");
 /**
  * @license
@@ -90,7 +91,14 @@ class AgentRegistrySingleMCPToolset extends import_base_toolset.BaseToolset {
     };
     const sessionManager = new import_mcp_session_manager.MCPSessionManager(connectionParamsCopy);
     const session = await sessionManager.createSession();
-    const listResult = await session.listTools();
+    let listResult;
+    try {
+      listResult = await session.listTools();
+    } finally {
+      await sessionManager.closeSession(session).catch((e) => {
+        import_logger.logger.warn("Failed to close MCP discovery session", e);
+      });
+    }
     const tools = listResult.tools.map((tool) => {
       const prefixedName = this.prefix ? `${this.prefix}_${tool.name}` : tool.name;
       const mcpTool = new import_mcp_tool.MCPTool(

package/dist/cjs/memory/in_memory_memory_service.js

@@ -35,12 +35,23 @@ module.exports = __toCommonJS(in_memory_memory_service_exports);
 class InMemoryMemoryService {
   constructor() {
     this.memories = [];
-    this.sessionEvents = {};
+    /**
+     * A map from user key to a map from session ID to events.
+     *
+     * The inner map is keyed by `session.id`, which arrives off the request path
+     * and contains no `/`, so it can be exactly `__proto__`. On a plain object
+     * literal that key would reach the inherited `__proto__` setter and
+     * re-parent the map instead of creating an own property, silently dropping
+     * the session from the `Object.values` scan in `searchMemory`. The outer key
+     * always contains a `/` (see `getUserKey`) and cannot collide, but is
+     * created the same way for consistency.
+     */
+    this.sessionEvents = /* @__PURE__ */ Object.create(null);
   }
   async addSessionToMemory(session) {
     const userKey = getUserKey(session.appName, session.userId);
     if (!this.sessionEvents[userKey]) {
-      this.sessionEvents[userKey] = {};
+      this.sessionEvents[userKey] = /* @__PURE__ */ Object.create(null);
     }
     this.sessionEvents[userKey][session.id] = session.events.filter(
       (event) => {

package/dist/cjs/memory/vertex_ai_memory_bank_service.js

@@ -116,6 +116,9 @@ class VertexAiMemoryBankService {
     if (options.client) {
       this.memories = options.client.agentEnginesInternal.memories;
     } else {
+      if (this.expressModeApiKey && (!this.projectId || !this.location)) {
+        throw new Error(import_vertex_ai_utils.EXPRESS_MODE_UNSUPPORTED_MESSAGE);
+      }
       const client = new import_vertexai.Client({
         project: this.projectId,
         location: this.location

package/dist/cjs/plugins/base_plugin.js

@@ -99,8 +99,10 @@ class BasePlugin {
    * @param params.invocationContext The context for the entire invocation.
    * @param params.event The event raised by the runner.
    * @returns An optional value. A non-`undefined` return may be used by the
-   *     framework to modify or replace the response. Returning `undefined`
-   *     allows the original response to be used.
+   *     framework to modify or replace the response. Copy `params.event` when
+   *     constructing a replacement to preserve fields that are not being
+   *     modified, such as event actions. Returning `undefined` allows the
+   *     original response to be used.
    */
   // eslint-disable-next-line @typescript-eslint/no-unused-vars
   async onEventCallback(params) {

package/dist/cjs/plugins/global_instruction_plugin.js

@@ -0,0 +1,97 @@
+/**
+  * @license
+  * Copyright 2026 Google LLC
+  * SPDX-License-Identifier: Apache-2.0
+  */
+
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var global_instruction_plugin_exports = {};
+__export(global_instruction_plugin_exports, {
+  GlobalInstructionPlugin: () => GlobalInstructionPlugin
+});
+module.exports = __toCommonJS(global_instruction_plugin_exports);
+var import_instructions = require("../agents/instructions.js");
+var import_readonly_context = require("../agents/readonly_context.js");
+var import_base_plugin = require("./base_plugin.js");
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+class GlobalInstructionPlugin extends import_base_plugin.BasePlugin {
+  /**
+   * Initializes the GlobalInstructionPlugin.
+   *
+   * @param globalInstruction The instruction to apply globally. Can be a string
+   *     or an InstructionProvider function that takes ReadonlyContext and
+   *     returns a string (sync or async).
+   * @param name The name of the plugin (defaults to 'global_instruction').
+   */
+  constructor(globalInstruction, name = "global_instruction") {
+    super(name);
+    this.globalInstruction = globalInstruction;
+  }
+  async beforeModelCallback(params) {
+    if (!this.globalInstruction) {
+      return;
+    }
+    const readonlyContext = new import_readonly_context.ReadonlyContext(
+      params.callbackContext.invocationContext
+    );
+    const finalGlobalInstruction = await this.resolveGlobalInstruction(readonlyContext);
+    if (!finalGlobalInstruction) {
+      return;
+    }
+    if (!params.llmRequest.config) {
+      params.llmRequest.config = {};
+    }
+    const existingInstruction = params.llmRequest.config.systemInstruction;
+    if (!existingInstruction || Array.isArray(existingInstruction) && existingInstruction.length === 0) {
+      params.llmRequest.config.systemInstruction = finalGlobalInstruction;
+      return;
+    }
+    if (typeof existingInstruction === "string") {
+      params.llmRequest.config.systemInstruction = `${finalGlobalInstruction}
+
+${existingInstruction}`;
+    } else if (Array.isArray(existingInstruction)) {
+      params.llmRequest.config.systemInstruction = [
+        finalGlobalInstruction,
+        ...existingInstruction
+      ];
+    } else {
+      params.llmRequest.config.systemInstruction = [
+        finalGlobalInstruction,
+        existingInstruction
+      ];
+    }
+    return;
+  }
+  async resolveGlobalInstruction(readonlyContext) {
+    if (typeof this.globalInstruction === "string") {
+      return await (0, import_instructions.injectSessionState)(this.globalInstruction, readonlyContext);
+    }
+    return await this.globalInstruction(readonlyContext);
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  GlobalInstructionPlugin
+});

package/dist/cjs/runner/runner.js

@@ -142,7 +142,7 @@ class Runner {
         ctx,
         this,
         async function* () {
-          var _a2, _b, _c, _d, _e, _f, _g, _h, _i, _j;
+          var _a2, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k;
           const session = await this.sessionService.getSession({
             appName: this.appName,
             userId,
@@ -203,7 +203,7 @@ class Runner {
               throw new Error("No parts in the newMessage.");
             }
             if (runConfig.saveInputBlobsAsArtifacts) {
-              await this.saveArtifacts(
+              newMessage = await this.saveArtifacts(
                 invocationContext.invocationId,
                 session.userId,
                 session.id,
@@ -259,24 +259,31 @@ class Runner {
                 if ((_h = params.abortSignal) == null ? void 0 : _h.aborted) {
                   return;
                 }
-                if (!event.partial) {
-                  await this.sessionService.appendEvent({ session, event });
-                }
                 const modifiedEvent = await this.pluginManager.runOnEventCallback({
                   invocationContext,
                   event
                 });
-                if ((_i = params.abortSignal) == null ? void 0 : _i.aborted) {
-                  return;
+                const outputEvent = modifiedEvent ? {
+                  ...modifiedEvent,
+                  id: event.id,
+                  invocationId: event.invocationId,
+                  timestamp: event.timestamp,
+                  author: modifiedEvent.author || event.author,
+                  branch: (_i = modifiedEvent.branch) != null ? _i : event.branch
+                } : event;
+                if (!event.partial) {
+                  await this.sessionService.appendEvent({
+                    session,
+                    event: outputEvent
+                  });
                 }
-                if (modifiedEvent) {
-                  yield modifiedEvent;
-                } else {
-                  yield event;
+                if ((_j = params.abortSignal) == null ? void 0 : _j.aborted) {
+                  return;
                 }
+                yield outputEvent;
               }
               await this.pluginManager.runAfterRunCallback({ invocationContext });
-              if ((_j = params.abortSignal) == null ? void 0 : _j.aborted) {
+              if ((_k = params.abortSignal) == null ? void 0 : _k.aborted) {
                 return;
               }
             }
@@ -291,7 +298,7 @@ class Runner {
   }
   /**
    * Saves artifacts from the message parts and replaces the inline data with
-   * a file name placeholder.
+   * a file name placeholder and optional file reference.
    *
    * @param invocationId The current invocation ID.
    * @param userId The user ID of the session.
@@ -301,28 +308,67 @@ class Runner {
   async saveArtifacts(invocationId, userId, sessionId, message) {
     var _a2;
     if (!this.artifactService || !((_a2 = message.parts) == null ? void 0 : _a2.length)) {
-      return;
+      return message;
     }
     const sessionKey = {
       appName: this.appName,
       userId,
       sessionId
     };
+    const newParts = [];
+    let modified = false;
     for (let i = 0; i < message.parts.length; i++) {
       const part = message.parts[i];
       if (!part.inlineData) {
+        newParts.push(part);
         continue;
       }
-      const fileName = `artifact_${invocationId}_${i}`;
-      await this.artifactService.saveArtifact({
-        ...sessionKey,
-        filename: fileName,
-        artifact: part
-      });
-      message.parts[i] = (0, import_genai.createPartFromText)(
-        `Uploaded file: ${fileName}. It is saved into artifacts`
-      );
+      try {
+        const inlineData = part.inlineData;
+        const fileName = inlineData.displayName || `artifact_${invocationId}_${i}`;
+        const version = await this.artifactService.saveArtifact({
+          ...sessionKey,
+          filename: fileName,
+          artifact: part
+        });
+        newParts.push((0, import_genai.createPartFromText)(`[Uploaded Artifact: "${fileName}"]`));
+        try {
+          const artifactVersion = await this.artifactService.getArtifactVersion(
+            {
+              ...sessionKey,
+              filename: fileName,
+              version
+            }
+          );
+          if ((artifactVersion == null ? void 0 : artifactVersion.canonicalUri) && /^(gs|https?):/i.test(artifactVersion.canonicalUri)) {
+            newParts.push({
+              fileData: {
+                fileUri: artifactVersion.canonicalUri,
+                mimeType: artifactVersion.mimeType || inlineData.mimeType || "",
+                displayName: fileName
+              }
+            });
+          }
+        } catch (error) {
+          import_logger.logger.warn(
+            `Failed to resolve artifact version for ${fileName}:`,
+            error
+          );
+        }
+        modified = true;
+        import_logger.logger.info(`Successfully saved artifact: ${fileName}`);
+      } catch (error) {
+        import_logger.logger.error(`Failed to save artifact for part ${i}:`, error);
+        newParts.push(part);
+      }
     }
+    if (!modified) {
+      return message;
+    }
+    return {
+      ...message,
+      parts: newParts
+    };
   }
   /**
    * Determines the next agent to run to continue the session. This is primarily

package/dist/cjs/sessions/base_session_service.js

@@ -91,7 +91,12 @@ class BaseSessionService {
       if (key.startsWith(import_state.State.TEMP_PREFIX)) {
         continue;
       }
-      session.state[key] = value;
+      Object.defineProperty(session.state, key, {
+        value,
+        writable: true,
+        enumerable: true,
+        configurable: true
+      });
     }
   }
 }
@@ -100,7 +105,7 @@ function trimTempDeltaState(event) {
     return event;
   }
   const stateDelta = event.actions.stateDelta;
-  const filteredStateDelta = {};
+  const filteredStateDelta = /* @__PURE__ */ Object.create(null);
   for (const [key, value] of Object.entries(stateDelta)) {
     if (!key.startsWith(import_state.State.TEMP_PREFIX)) {
       filteredStateDelta[key] = value;
@@ -110,7 +115,7 @@ function trimTempDeltaState(event) {
   return event;
 }
 function trimTempState(state) {
-  const filteredState = {};
+  const filteredState = /* @__PURE__ */ Object.create(null);
   for (const [key, value] of Object.entries(state)) {
     if (!key.startsWith(import_state.State.TEMP_PREFIX)) {
       filteredState[key] = value;

package/dist/cjs/sessions/in_memory_session_service.js

@@ -49,15 +49,15 @@ class InMemorySessionService extends import_base_session_service.BaseSessionServ
      * A map from app name to a map from user ID to a map from session ID to
      * session.
      */
-    this.sessions = {};
+    this.sessions = /* @__PURE__ */ Object.create(null);
     /**
      * A map from app name to a map from user ID to a map from key to the value.
      */
-    this.userState = {};
+    this.userState = /* @__PURE__ */ Object.create(null);
     /**
      * A map from app name to a map from key to the value.
      */
-    this.appState = {};
+    this.appState = /* @__PURE__ */ Object.create(null);
   }
   async createSession({
     appName,
@@ -76,10 +76,10 @@ class InMemorySessionService extends import_base_session_service.BaseSessionServ
       lastUpdateTime: Date.now()
     });
     if (!this.sessions[appName]) {
-      this.sessions[appName] = {};
+      this.sessions[appName] = /* @__PURE__ */ Object.create(null);
     }
     if (!this.sessions[appName][userId]) {
-      this.sessions[appName][userId] = {};
+      this.sessions[appName][userId] = /* @__PURE__ */ Object.create(null);
     }
     this.sessions[appName][userId][session.id] = session;
     const copiedSession = (0, import_lodash_es.cloneDeep)(session);
@@ -244,12 +244,12 @@ class InMemorySessionService extends import_base_session_service.BaseSessionServ
     if (event.actions && event.actions.stateDelta) {
       for (const key of Object.keys(event.actions.stateDelta)) {
         if (key.startsWith(import_state.State.APP_PREFIX)) {
-          this.appState[appName] = this.appState[appName] || {};
+          this.appState[appName] = this.appState[appName] || /* @__PURE__ */ Object.create(null);
           this.appState[appName][key.replace(import_state.State.APP_PREFIX, "")] = event.actions.stateDelta[key];
         }
         if (key.startsWith(import_state.State.USER_PREFIX)) {
-          this.userState[appName] = this.userState[appName] || {};
-          this.userState[appName][userId] = this.userState[appName][userId] || {};
+          this.userState[appName] = this.userState[appName] || /* @__PURE__ */ Object.create(null);
+          this.userState[appName][userId] = this.userState[appName][userId] || /* @__PURE__ */ Object.create(null);
           this.userState[appName][userId][key.replace(import_state.State.USER_PREFIX, "")] = event.actions.stateDelta[key];
         }
       }