@google/adk 1.4.0 → 1.6.0

package/dist/cjs/utils/error_utils.js

@@ -0,0 +1,120 @@
+/**
+  * @license
+  * Copyright 2026 Google LLC
+  * SPDX-License-Identifier: Apache-2.0
+  */
+
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var error_utils_exports = {};
+__export(error_utils_exports, {
+  formatError: () => formatError
+});
+module.exports = __toCommonJS(error_utils_exports);
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const MAX_RESPONSE_BODY_LENGTH = 1e3;
+const TRUNCATION_MARKER = "... [truncated]";
+const UNKNOWN_ERROR = "Unknown error";
+const MIN_HTTP_STATUS = 100;
+const MAX_HTTP_STATUS = 599;
+function asRecord(value) {
+  return value !== null && typeof value === "object" ? value : void 0;
+}
+function firstString(...values) {
+  for (const value of values) {
+    if (typeof value === "string") {
+      return value;
+    }
+  }
+  return void 0;
+}
+function truncateBody(body) {
+  return body.length > MAX_RESPONSE_BODY_LENGTH ? body.slice(0, MAX_RESPONSE_BODY_LENGTH) + TRUNCATION_MARKER : body;
+}
+function baseMessage(err) {
+  if (err instanceof Error) {
+    return err.message;
+  }
+  if (typeof err === "string") {
+    return err;
+  }
+  return String(err);
+}
+function extractHttpDetails(err) {
+  var _a, _b;
+  const record = asRecord(err);
+  if (record === void 0) {
+    return void 0;
+  }
+  const response = asRecord(record["response"]);
+  const rawStatus = (_b = (_a = record["status"]) != null ? _a : record["code"]) != null ? _b : response == null ? void 0 : response["status"];
+  const status = typeof rawStatus === "number" && rawStatus >= MIN_HTTP_STATUS && rawStatus <= MAX_HTTP_STATUS ? rawStatus : void 0;
+  const statusText = firstString(
+    record["statusText"],
+    response == null ? void 0 : response["statusText"]
+  );
+  const body = firstString(
+    response == null ? void 0 : response["data"],
+    response == null ? void 0 : response["body"],
+    response == null ? void 0 : response["text"]
+  );
+  if (status === void 0 && body === void 0) {
+    return void 0;
+  }
+  const head = status === void 0 ? "HTTP error" : `HTTP ${status}${statusText === void 0 ? "" : ` ${statusText}`}`;
+  return body === void 0 ? head : `${head}: ${truncateBody(body)}`;
+}
+function formatErrorRecursive(err, seen) {
+  var _a;
+  if (err === null || err === void 0) {
+    return UNKNOWN_ERROR;
+  }
+  if (typeof err === "object") {
+    if (seen.has(err)) {
+      return baseMessage(err);
+    }
+    seen.add(err);
+  }
+  if (err instanceof AggregateError && err.errors.length > 0) {
+    return err.errors.map((sub) => formatErrorRecursive(sub, seen)).join(" | ");
+  }
+  const http = extractHttpDetails(err);
+  const base = baseMessage(err);
+  const cause = (_a = asRecord(err)) == null ? void 0 : _a["cause"];
+  const causeMessage = cause !== void 0 ? formatErrorRecursive(cause, seen) : void 0;
+  let message = base.length > 0 ? base : UNKNOWN_ERROR;
+  if (http !== void 0) {
+    message = `${message} (${http})`;
+  }
+  if (causeMessage !== void 0 && http === void 0 && !message.includes(causeMessage)) {
+    message = `${message}: ${causeMessage}`;
+  }
+  return message;
+}
+function formatError(err) {
+  return formatErrorRecursive(err, /* @__PURE__ */ new Set());
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  formatError
+});

package/dist/cjs/utils/file_utils.js

@@ -46,12 +46,15 @@ var path = __toESM(require("node:path"), 1);
  * Copyright 2026 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
+function isInsideDir(resolvedPath, resolvedBaseDir) {
+  return resolvedPath === resolvedBaseDir || resolvedPath.startsWith(resolvedBaseDir + path.sep);
+}
 async function materializeFiles(files, dir = process.cwd()) {
   const resolvedBaseDir = path.resolve(dir);
   const createdFiles = [];
   for (const file of files) {
     const fullPath = path.resolve(dir, file.name);
-    if (!fullPath.startsWith(resolvedBaseDir)) {
+    if (!isInsideDir(fullPath, resolvedBaseDir)) {
       throw new Error(
         `Path traversal detected: ${file.name} resolves outside of ${dir}`
       );
@@ -73,7 +76,7 @@ async function materializeFiles(files, dir = process.cwd()) {
         break;
       }
     }
-    if (!finalPath.startsWith(resolvedBaseDir)) {
+    if (!isInsideDir(finalPath, resolvedBaseDir)) {
       throw new Error(
         `Path traversal detected: ${file.name} resolves outside of ${dir}`
       );

package/dist/cjs/utils/output_schema_utils.js

@@ -0,0 +1,43 @@
+/**
+  * @license
+  * Copyright 2026 Google LLC
+  * SPDX-License-Identifier: Apache-2.0
+  */
+
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var output_schema_utils_exports = {};
+__export(output_schema_utils_exports, {
+  canUseOutputSchemaWithTools: () => canUseOutputSchemaWithTools
+});
+module.exports = __toCommonJS(output_schema_utils_exports);
+var import_model_name = require("./model_name.js");
+var import_variant_utils = require("./variant_utils.js");
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+function canUseOutputSchemaWithTools(modelString) {
+  return (0, import_variant_utils.getGoogleLlmVariant)() === import_variant_utils.GoogleLLMVariant.VERTEX_AI && (0, import_model_name.isGemini2OrAbove)(modelString);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  canUseOutputSchemaWithTools
+});

package/dist/cjs/utils/streaming_utils.js

@@ -30,7 +30,7 @@ __export(streaming_utils_exports, {
 module.exports = __toCommonJS(streaming_utils_exports);
 var import_genai = require("@google/genai");
 var import_jsonpath_plus = require("jsonpath-plus");
-var import_functions = require("../agents/functions.js");
+var import_event = require("../events/event.js");
 var import_feature_registry = require("../features/feature_registry.js");
 var import_llm_response = require("../models/llm_response.js");
 /**
@@ -127,7 +127,7 @@ class ProgressiveStrategy {
         functionCall: {
           name: this.currentFcName,
           args: JSON.parse(JSON.stringify(this.currentFcArgs)),
-          id: (_a = this.currentFcId) != null ? _a : (0, import_functions.generateClientFunctionCallId)()
+          id: (_a = this.currentFcId) != null ? _a : (0, import_event.generateClientFunctionCallId)()
         }
       };
       if (this.currentThoughtSignature) {
@@ -172,7 +172,7 @@ class ProgressiveStrategy {
     }
     if (fc.partialArgs || fc.willContinue) {
       if (!fc.id && !this.currentFcId) {
-        fc.id = (0, import_functions.generateClientFunctionCallId)();
+        fc.id = (0, import_event.generateClientFunctionCallId)();
       }
       if (part.thoughtSignature && !this.currentThoughtSignature) {
         this.currentThoughtSignature = part.thoughtSignature;
@@ -181,7 +181,7 @@ class ProgressiveStrategy {
     } else {
       if (fc.name) {
         if (!fc.id) {
-          fc.id = (0, import_functions.generateClientFunctionCallId)();
+          fc.id = (0, import_event.generateClientFunctionCallId)();
         }
         this.flushTextBufferToSequence();
         this.partsSequence.push(part);
@@ -243,7 +243,7 @@ class NonProgressiveStrategy {
           continue;
         }
         if (part.functionCall && !part.functionCall.id) {
-          part.functionCall.id = (0, import_functions.generateClientFunctionCallId)();
+          part.functionCall.id = (0, import_event.generateClientFunctionCallId)();
         }
         nonTextParts.push(part);
       }

package/dist/cjs/utils/vertex_ai_utils.js

@@ -24,6 +24,7 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var vertex_ai_utils_exports = {};
 __export(vertex_ai_utils_exports, {
+  EXPRESS_MODE_UNSUPPORTED_MESSAGE: () => EXPRESS_MODE_UNSUPPORTED_MESSAGE,
   getExpressModeApiKey: () => getExpressModeApiKey
 });
 module.exports = __toCommonJS(vertex_ai_utils_exports);
@@ -33,6 +34,7 @@ var import_env_aware_utils = require("./env_aware_utils.js");
  * Copyright 2026 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
+const EXPRESS_MODE_UNSUPPORTED_MESSAGE = "Vertex AI Express Mode (expressModeApiKey / GOOGLE_API_KEY) is not supported: the @google-cloud/vertexai Agent Engine client cannot send an API key. Provide projectId and location (with Application Default Credentials), or inject a preconfigured client.";
 function getExpressModeApiKey(project, location, expressModeApiKey) {
   if ((project || location) && expressModeApiKey) {
     throw new Error(
@@ -46,5 +48,6 @@ function getExpressModeApiKey(project, location, expressModeApiKey) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  EXPRESS_MODE_UNSUPPORTED_MESSAGE,
   getExpressModeApiKey
 });

package/dist/cjs/version.js

@@ -32,7 +32,7 @@ module.exports = __toCommonJS(version_exports);
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-const version = "1.4.0";
+const version = "1.6.0";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   version

package/dist/esm/a2a/a2a_remote_agent.js

@@ -107,7 +107,12 @@ class RemoteA2AAgent extends BaseAgent {
               await callback(context, chunk);
             }
           }
-          const adkEvent = toAdkEvent(chunk, context.invocationId, this.name);
+          const adkEvent = toAdkEvent(
+            chunk,
+            context.invocationId,
+            this.name,
+            context.branch
+          );
           if (!adkEvent) {
             continue;
           }
@@ -128,7 +133,12 @@ class RemoteA2AAgent extends BaseAgent {
             await callback(context, result);
           }
         }
-        const adkEvent = toAdkEvent(result, context.invocationId, this.name);
+        const adkEvent = toAdkEvent(
+          result,
+          context.invocationId,
+          this.name,
+          context.branch
+        );
         if (adkEvent) {
           processor.updateCustomMetadata(adkEvent, result);
           yield adkEvent;

package/dist/esm/a2a/agent_to_a2a.js

@@ -16,10 +16,26 @@ import {
 import express from "express";
 import { StreamingMode } from "../agents/run_config.js";
 import { InMemorySessionService } from "../sessions/in_memory_session_service.js";
+import { logger } from "../utils/logger.js";
 import { getA2AAgentCard, resolveAgentCard } from "./agent_card.js";
 import { A2AAgentExecutor } from "./agent_executor.js";
+function resolveA2aUserBuilder(options) {
+  if (options.authentication) {
+    return options.authentication;
+  }
+  if (options.allowUnauthenticated === true) {
+    logger.warn(
+      "SECURITY WARNING: Mounting the A2A server WITHOUT authentication because `allowUnauthenticated: true` was set. The agent and all of its tools are exposed to any network-reachable caller, which can invoke them with arbitrary input and read the output. Do NOT use this outside of local, trusted development."
+    );
+    return UserBuilder.noAuthentication;
+  }
+  throw new Error(
+    "toA2a: refusing to mount the A2A server without authentication. The A2A surface lets any network-reachable caller invoke this agent and its tools with arbitrary input and read the output, so it must be authenticated. Provide `authentication` (a UserBuilder that validates the request, e.g. a bearer token or OIDC credential) or, only for local/trusted development, explicitly set `allowUnauthenticated: true`."
+  );
+}
 async function toA2a(agent, options = {}) {
   var _a, _b, _c, _d;
+  const userBuilder = resolveA2aUserBuilder(options);
   const host = (_a = options.host) != null ? _a : "localhost";
   const port = (_b = options.port) != null ? _b : 8e3;
   const protocol = (_c = options.protocol) != null ? _c : "http";
@@ -54,7 +70,6 @@ async function toA2a(agent, options = {}) {
   );
   const app = (_d = options.app) != null ? _d : express();
   if (!options.app) {
-    app.use(express.urlencoded({ limit: "50mb", extended: true }));
     app.use(express.json({ limit: "50mb" }));
   }
   app.use(
@@ -65,14 +80,14 @@ async function toA2a(agent, options = {}) {
     `${basePath}/rest`,
     restHandler({
       requestHandler,
-      userBuilder: UserBuilder.noAuthentication
+      userBuilder
     })
   );
   app.use(
     `${basePath}/jsonrpc`,
     jsonRpcHandler({
       requestHandler,
-      userBuilder: UserBuilder.noAuthentication
+      userBuilder
     })
   );
   return app;

package/dist/esm/a2a/auth.js

@@ -0,0 +1,37 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { timingSafeEqual } from "node:crypto";
+const AUTHENTICATED_USER_NAME = "a2a-bearer-token";
+const BEARER_SCHEME_PREFIX = "bearer ";
+function timingSafeEqualStrings(a, b) {
+  const left = Buffer.from(a, "utf8");
+  const right = Buffer.from(b, "utf8");
+  return left.length === right.length && timingSafeEqual(left, right);
+}
+function bearerTokenUserBuilder(token) {
+  const expected = token.trim();
+  if (!expected) {
+    throw new Error(
+      "bearerTokenUserBuilder: an empty A2A bearer token is not a valid authenticator. Supply a real shared secret, or configure no token at all to run the A2A surface unauthenticated."
+    );
+  }
+  return async (req) => {
+    var _a;
+    const header = (_a = req.headers.authorization) != null ? _a : "";
+    const credential = header.toLowerCase().startsWith(BEARER_SCHEME_PREFIX) ? header.slice(BEARER_SCHEME_PREFIX.length) : "";
+    if (!timingSafeEqualStrings(credential, expected)) {
+      throw new Error(
+        "A2A request rejected: missing or invalid `Authorization: Bearer` credential."
+      );
+    }
+    return { isAuthenticated: true, userName: AUTHENTICATED_USER_NAME };
+  };
+}
+export {
+  bearerTokenUserBuilder
+};

package/dist/esm/a2a/event_converter_utils.js

@@ -43,33 +43,35 @@ function toA2AMessage(event, {
     metadata: getA2AEventMetadata(event, { appName, userId, sessionId })
   };
 }
-function toAdkEvent(event, invocationId, agentName) {
+function toAdkEvent(event, invocationId, agentName, branch) {
   if (isMessage(event)) {
-    return messageToAdkEvent(event, invocationId, agentName);
+    return messageToAdkEvent(event, invocationId, agentName, branch);
   }
   if (isTask(event)) {
-    return taskToAdkEvent(event, invocationId, agentName);
+    return taskToAdkEvent(event, invocationId, agentName, branch);
   }
   if (isTaskArtifactUpdateEvent(event)) {
-    return artifactUpdateToAdkEvent(event, invocationId, agentName);
+    return artifactUpdateToAdkEvent(event, invocationId, agentName, branch);
   }
   if (isTaskStatusUpdateEvent(event)) {
-    return event.final ? finalTaskStatusUpdateToAdkEvent(event, invocationId, agentName) : taskStatusUpdateToAdkEvent(event, invocationId, agentName);
+    return event.final ? finalTaskStatusUpdateToAdkEvent(event, invocationId, agentName, branch) : taskStatusUpdateToAdkEvent(event, invocationId, agentName, branch);
   }
   return void 0;
 }
-function messageToAdkEvent(msg, invocationId, agentName, parentEvent) {
+function messageToAdkEvent(msg, invocationId, agentName, branch) {
   const parts = toGenAIParts(msg.parts);
+  const content = parts.length === 0 ? void 0 : msg.role === MessageRole.USER ? createUserContent(parts) : createModelContent(parts);
   return {
-    ...createAdkEventFromMetadata(parentEvent || msg),
+    ...createAdkEventFromMetadata(msg),
     invocationId,
     author: msg.role === MessageRole.USER ? MessageRole.USER : agentName,
-    content: msg.role === MessageRole.USER ? createUserContent(parts) : createModelContent(parts),
+    branch,
+    content,
     turnComplete: true,
     partial: false
   };
 }
-function artifactUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
+function artifactUpdateToAdkEvent(a2aEvent, invocationId, agentName, branch) {
   var _a;
   const partsToConvert = ((_a = a2aEvent.artifact) == null ? void 0 : _a.parts) || [];
   if (partsToConvert.length === 0) {
@@ -80,12 +82,13 @@ function artifactUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
     ...createAdkEventFromMetadata(a2aEvent),
     invocationId,
     author: agentName,
+    branch,
     content: createModelContent(toGenAIParts(partsToConvert)),
     longRunningToolIds: getLongRunningToolIDs(partsToConvert),
     partial
   };
 }
-function finalTaskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
+function finalTaskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName, branch) {
   var _a;
   const partsToConvert = ((_a = a2aEvent.status.message) == null ? void 0 : _a.parts) || [];
   if (partsToConvert.length === 0) {
@@ -98,28 +101,33 @@ function finalTaskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
     ...createAdkEventFromMetadata(a2aEvent),
     invocationId,
     author: agentName,
+    branch,
     errorMessage: isFailedTask ? getFailedTaskStatusUpdateEventError(a2aEvent) : void 0,
     content: hasContent ? createModelContent(parts) : void 0,
     longRunningToolIds: getLongRunningToolIDs(partsToConvert),
     turnComplete: true
   };
 }
-function taskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
+function taskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName, branch) {
   const msg = a2aEvent.status.message;
   if (!msg) {
     return void 0;
   }
   const parts = toGenAIParts(msg.parts);
+  if (parts.length === 0) {
+    return void 0;
+  }
   return {
     ...createAdkEventFromMetadata(a2aEvent),
     invocationId,
     author: agentName,
+    branch,
     content: createModelContent(parts),
     turnComplete: false,
     partial: true
   };
 }
-function taskToAdkEvent(a2aTask, invocationId, agentName) {
+function taskToAdkEvent(a2aTask, invocationId, agentName, branch) {
   var _a, _b;
   const parts = [];
   const longRunningToolIds = [];
@@ -140,23 +148,33 @@ function taskToAdkEvent(a2aTask, invocationId, agentName) {
   }
   const isTerminal = isTerminalTaskStatusUpdateEvent(a2aTask) || isInputRequiredTaskStatusUpdateEvent(a2aTask);
   const isFailed = isFailedTaskStatusUpdateEvent(a2aTask);
-  if (parts.length === 0 && !isTerminal) {
+  if (parts.length === 0 && !isFailed) {
     return void 0;
   }
   return {
     ...createAdkEventFromMetadata(a2aTask),
     invocationId,
     author: agentName,
+    branch,
     content: isFailed ? void 0 : createModelContent(parts),
     errorMessage: isFailed ? getFailedTaskStatusUpdateEventError(a2aTask) : void 0,
     longRunningToolIds,
     turnComplete: isTerminal
   };
 }
+const PEER_SETTABLE_ACTION_FIELDS = /* @__PURE__ */ new Set(["escalate"]);
 function createAdkEventFromMetadata(a2aEvent) {
   const metadata = a2aEvent.metadata || {};
   return createEvent({
-    branch: metadata[A2AMetadataKeys.BRANCH],
+    // `branch` is intentionally NOT restored from peer metadata here (unlike
+    // the other fields below): it is the mechanism getContents() (see
+    // content_processor_utils.ts) uses to keep sibling sub-agent branches'
+    // conversation contexts isolated from each other. A remote A2A peer that
+    // controls its own outgoing metadata could otherwise forge `adk_branch`
+    // (set it to a shared ancestor branch, or omit it) to leak its content
+    // into an unrelated sibling agent's LLM context. Every caller of the
+    // `*ToAdkEvent` functions in this file force-sets `branch` from its own
+    // local `InvocationContext` instead, the same way `author` is handled.
     author: metadata[A2AMetadataKeys.AUTHOR],
     partial: metadata[A2AMetadataKeys.PARTIAL],
     errorCode: metadata[A2AMetadataKeys.ERROR_CODE],
@@ -165,10 +183,21 @@ function createAdkEventFromMetadata(a2aEvent) {
     groundingMetadata: metadata[A2AMetadataKeys.GROUNDING_METADATA],
     usageMetadata: metadata[A2AMetadataKeys.USAGE_METADATA],
     customMetadata: metadata[A2AMetadataKeys.CUSTOM_METADATA],
-    actions: createEventActions({
-      escalate: !!metadata[A2AMetadataKeys.ESCALATE],
-      transferToAgent: metadata[A2AMetadataKeys.TRANSFER_TO_AGENT]
-    })
+    // Only fields in PEER_SETTABLE_ACTION_FIELDS may be restored from
+    // metadata a remote A2A peer controls. Every other action field either
+    // mutates the caller's own session or drives the caller's own control
+    // flow (e.g. `transferToAgent`, see llm_agent.ts), so it must never be
+    // rebuilt from peer-supplied data. Filtering through an allowlist here
+    // (rather than just omitting the unsafe field) means a future action
+    // field is unsafe-by-default: adding it to `candidateActions` alone
+    // does nothing until it's also added to the allowlist.
+    actions: createEventActions(
+      Object.fromEntries(
+        Object.entries({
+          escalate: !!metadata[A2AMetadataKeys.ESCALATE]
+        }).filter(([key]) => PEER_SETTABLE_ACTION_FIELDS.has(key))
+      )
+    )
   });
 }
 function getLongRunningToolIDs(parts) {

package/dist/esm/a2a/metadata_converter_utils.js

@@ -56,7 +56,7 @@ function getA2AEventMetadata(adkEvent, {
     [A2AMetadataKeys.INVOCATION_ID]: adkEvent.invocationId,
     [A2AMetadataKeys.AUTHOR]: adkEvent.author,
     [A2AMetadataKeys.BRANCH]: adkEvent.branch,
-    [A2AMetadataKeys.ERROR_CODE]: adkEvent.errorMessage,
+    [A2AMetadataKeys.ERROR_CODE]: adkEvent.errorCode,
     [A2AMetadataKeys.ERROR_MESSAGE]: adkEvent.errorMessage,
     [A2AMetadataKeys.CITATION_METADATA]: adkEvent.citationMetadata,
     [A2AMetadataKeys.GROUNDING_METADATA]: adkEvent.groundingMetadata,

package/dist/esm/agents/base_agent.js

@@ -26,6 +26,7 @@ class BaseAgent {
      * A unique symbol to identify ADK agent classes.
      */
     this[_a] = true;
+    this.config = { ...config };
     this.name = validateAgentName(config.name);
     this.description = config.description;
     this.parentAgent = config.parentAgent;
@@ -43,6 +44,44 @@ class BaseAgent {
   get rootAgent() {
     return getRootAgent(this);
   }
+  /**
+   * Creates a copy of this agent with the given config fields overridden.
+   *
+   * Mirrors adk-python's `BaseAgent.clone(update=...)`. The clone is a detached
+   * root: its `parentAgent` is always `undefined`. Sub-agents are recursively
+   * cloned (and re-parented to the clone) unless `subAgents` is overridden.
+   * Rebuilding via the concrete constructor re-derives all state, so a cloned
+   * `LlmAgent` gets a fresh `requestProcessors` array rather than sharing the
+   * original's. See google/adk-js#534.
+   *
+   * @param overrides Config fields to override on the clone. Overriding
+   *     `parentAgent` is rejected, matching adk-python.
+   * @returns A new detached agent instance of the same concrete class.
+   */
+  clone(overrides) {
+    if (overrides && "parentAgent" in overrides) {
+      throw new Error(
+        "Cannot update `parentAgent` field in clone. Parent agent is set only when the parent agent is instantiated with the sub-agents."
+      );
+    }
+    const merged = { ...this.config, ...overrides };
+    merged.parentAgent = void 0;
+    const mergedRecord = merged;
+    for (const key of Object.keys(mergedRecord)) {
+      if (key === "subAgents" || overrides && key in overrides) {
+        continue;
+      }
+      const value = mergedRecord[key];
+      if (Array.isArray(value)) {
+        mergedRecord[key] = value.slice();
+      }
+    }
+    if (!overrides || !("subAgents" in overrides)) {
+      merged.subAgents = this.subAgents.map((subAgent) => subAgent.clone());
+    }
+    const ctor = this.constructor;
+    return new ctor(merged);
+  }
   /**
    * Entry method to run an agent via text-based conversation.
    *