@google/adk 1.5.0 → 2.0.0

package/dist/web/a2a/agent_executor.js

@@ -1,6 +1,26 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __defProps = Object.defineProperties;
+var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
+var __getOwnPropSymbols = Object.getOwnPropertySymbols;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __propIsEnum = Object.prototype.propertyIsEnumerable;
 var __knownSymbol = (name, symbol) => (symbol = Symbol[name]) ? symbol : Symbol.for("Symbol." + name);
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __spreadValues = (a, b) => {
+  for (var prop in b || (b = {}))
+    if (__hasOwnProp.call(b, prop))
+      __defNormalProp(a, prop, b[prop]);
+  if (__getOwnPropSymbols)
+    for (var prop of __getOwnPropSymbols(b)) {
+      if (__propIsEnum.call(b, prop))
+        __defNormalProp(a, prop, b[prop]);
+    }
+  return a;
+};
+var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 var __forAwait = (obj, it, method) => (it = obj[__knownSymbol("asyncIterator")]) ? it.call(obj) : (obj = obj[__knownSymbol("iterator")](), it = {}, method = (key, fn) => (fn = obj[key]) && (it[key] = (arg) => new Promise((yes, no, done) => (arg = fn.call(obj, arg), done = arg.done, Promise.resolve(arg.value).then((value) => yes({ value, done }), no)))), method("next"), method("return"), it);
 /**
  * @license
@@ -18,7 +38,7 @@ import {
 } from "./a2a_event.js";
 import {
   getFinalTaskStatusUpdate,
-  getTaskInputRequiredEvent
+  getUnansweredRequestEvent
 } from "./event_processor_utils.js";
 import { createExecutorContext } from "./executor_context.js";
 import {
@@ -26,7 +46,7 @@ import {
   getA2ASessionMetadata
 } from "./metadata_converter_utils.js";
 import { toA2AParts, toGenAIContent } from "./part_converter_utils.js";
-class A2AAgentExecutor {
+const _A2AAgentExecutor = class _A2AAgentExecutor {
   constructor(config) {
     this.config = config;
     this.agentPartialArtifactIdsMap = {};
@@ -56,19 +76,20 @@ class A2AAgentExecutor {
       if (this.config.beforeExecuteCallback) {
         await this.config.beforeExecuteCallback(ctx);
       }
-      if (ctx.task) {
-        const inputRequiredEvent = getTaskInputRequiredEvent(
-          ctx.task,
-          genAIUserMessage
-        );
-        if (inputRequiredEvent) {
-          await this.publishFinalTaskStatus({
-            executorContext,
-            eventBus,
-            event: inputRequiredEvent
-          });
-          return;
-        }
+      const unansweredRequestEvent = getUnansweredRequestEvent({
+        taskId: ctx.taskId,
+        contextId: ctx.contextId,
+        task: ctx.task,
+        sessionEvents: session.events,
+        genAIContent: genAIUserMessage
+      });
+      if (unansweredRequestEvent) {
+        await this.publishFinalTaskStatus({
+          executorContext,
+          eventBus,
+          event: unansweredRequestEvent
+        });
+        return;
       }
       if (!ctx.task) {
         eventBus.publish(
@@ -91,7 +112,10 @@ class A2AAgentExecutor {
           userId,
           sessionId,
           newMessage: genAIUserMessage,
-          runConfig: this.config.runConfig
+          // Marked remote so the run knows this message came from a peer rather
+          // than from the operator: a human-in-the-loop gate is not answerable
+          // over A2A unless the deployment opts in.
+          runConfig: __spreadProps(__spreadValues({}, this.config.runConfig), { remoteDelivered: true })
         })), more, temp, error; more = !(temp = await iter.next()).done; more = false) {
           const adkEvent = temp.value;
           adkEvents.push(adkEvent);
@@ -187,7 +211,9 @@ class A2AAgentExecutor {
     }
     eventBus.publish(event);
   }
-}
+};
+__name(_A2AAgentExecutor, "A2AAgentExecutor");
+let A2AAgentExecutor = _A2AAgentExecutor;
 async function getAdkSession(userId, sessionId, sessionService, appName) {
   const session = await sessionService.getSession({
     appName,
@@ -203,6 +229,7 @@ async function getAdkSession(userId, sessionId, sessionService, appName) {
     sessionId
   });
 }
+__name(getAdkSession, "getAdkSession");
 async function getAdkRunner(runnerOrConfig) {
   if (typeof runnerOrConfig === "function") {
     const result = await runnerOrConfig();
@@ -213,6 +240,7 @@ async function getAdkRunner(runnerOrConfig) {
   }
   return new Runner(runnerOrConfig);
 }
+__name(getAdkRunner, "getAdkRunner");
 export {
   A2AAgentExecutor
 };

package/dist/web/a2a/agent_to_a2a.js

@@ -1,5 +1,28 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -7,19 +30,22 @@ const require = topLevelCreateRequire(import.meta.url);
  */
 import { AGENT_CARD_PATH } from "@a2a-js/sdk";
 import { DefaultRequestHandler, InMemoryTaskStore } from "@a2a-js/sdk/server";
-import {
-  agentCardHandler,
-  jsonRpcHandler,
-  restHandler,
-  UserBuilder
-} from "@a2a-js/sdk/server/express";
-import express from "express";
 import { StreamingMode } from "../agents/run_config.js";
 import { InMemorySessionService } from "../sessions/in_memory_session_service.js";
 import { logger } from "../utils/logger.js";
+import { loadOptionalPeer } from "../utils/optional_peer.js";
 import { getA2AAgentCard, resolveAgentCard } from "./agent_card.js";
 import { A2AAgentExecutor } from "./agent_executor.js";
-function resolveA2aUserBuilder(options) {
+async function loadExpressBindings() {
+  const expressModule = await loadOptionalPeer(
+    { packageName: "express", feature: "toA2a" },
+    () => Promise.resolve().then(() => __toESM(require("express"), 1))
+  );
+  const a2aExpress = await Promise.resolve().then(() => __toESM(require("@a2a-js/sdk/server/express"), 1));
+  return { express: expressModule.default, a2aExpress };
+}
+__name(loadExpressBindings, "loadExpressBindings");
+function resolveA2aUserBuilder(options, a2aExpress) {
   if (options.authentication) {
     return options.authentication;
   }
@@ -27,15 +53,17 @@ function resolveA2aUserBuilder(options) {
     logger.warn(
       "SECURITY WARNING: Mounting the A2A server WITHOUT authentication because `allowUnauthenticated: true` was set. The agent and all of its tools are exposed to any network-reachable caller, which can invoke them with arbitrary input and read the output. Do NOT use this outside of local, trusted development."
     );
-    return UserBuilder.noAuthentication;
+    return a2aExpress.UserBuilder.noAuthentication;
   }
   throw new Error(
     "toA2a: refusing to mount the A2A server without authentication. The A2A surface lets any network-reachable caller invoke this agent and its tools with arbitrary input and read the output, so it must be authenticated. Provide `authentication` (a UserBuilder that validates the request, e.g. a bearer token or OIDC credential) or, only for local/trusted development, explicitly set `allowUnauthenticated: true`."
   );
 }
+__name(resolveA2aUserBuilder, "resolveA2aUserBuilder");
 async function toA2a(agent, options = {}) {
   var _a, _b, _c, _d;
-  const userBuilder = resolveA2aUserBuilder(options);
+  const { express: expressFactory, a2aExpress } = await loadExpressBindings();
+  const userBuilder = resolveA2aUserBuilder(options, a2aExpress);
   const host = (_a = options.host) != null ? _a : "localhost";
   const port = (_b = options.port) != null ? _b : 8e3;
   const protocol = (_c = options.protocol) != null ? _c : "http";
@@ -68,31 +96,31 @@ async function toA2a(agent, options = {}) {
     new InMemoryTaskStore(),
     agentExecutor
   );
-  const app = (_d = options.app) != null ? _d : express();
+  const app = (_d = options.app) != null ? _d : expressFactory();
   if (!options.app) {
-    app.use(express.urlencoded({ limit: "50mb", extended: true }));
-    app.use(express.json({ limit: "50mb" }));
+    app.use(expressFactory.json({ limit: "50mb" }));
   }
   app.use(
     "".concat(basePath, "/").concat(AGENT_CARD_PATH),
-    agentCardHandler({ agentCardProvider: requestHandler })
+    a2aExpress.agentCardHandler({ agentCardProvider: requestHandler })
   );
   app.use(
     "".concat(basePath, "/rest"),
-    restHandler({
+    a2aExpress.restHandler({
       requestHandler,
       userBuilder
     })
   );
   app.use(
     "".concat(basePath, "/jsonrpc"),
-    jsonRpcHandler({
+    a2aExpress.jsonRpcHandler({
       requestHandler,
       userBuilder
     })
   );
   return app;
 }
+__name(toA2a, "toA2a");
 export {
   toA2a
 };

package/dist/web/a2a/auth.js

@@ -0,0 +1,41 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { timingSafeEqual } from "node:crypto";
+const AUTHENTICATED_USER_NAME = "a2a-bearer-token";
+const BEARER_SCHEME_PREFIX = "bearer ";
+function timingSafeEqualStrings(a, b) {
+  const left = Buffer.from(a, "utf8");
+  const right = Buffer.from(b, "utf8");
+  return left.length === right.length && timingSafeEqual(left, right);
+}
+__name(timingSafeEqualStrings, "timingSafeEqualStrings");
+function bearerTokenUserBuilder(token) {
+  const expected = token.trim();
+  if (!expected) {
+    throw new Error(
+      "bearerTokenUserBuilder: an empty A2A bearer token is not a valid authenticator. Supply a real shared secret, or configure no token at all to run the A2A surface unauthenticated."
+    );
+  }
+  return async (req) => {
+    var _a;
+    const header = (_a = req.headers.authorization) != null ? _a : "";
+    const credential = header.toLowerCase().startsWith(BEARER_SCHEME_PREFIX) ? header.slice(BEARER_SCHEME_PREFIX.length) : "";
+    if (!timingSafeEqualStrings(credential, expected)) {
+      throw new Error(
+        "A2A request rejected: missing or invalid `Authorization: Bearer` credential."
+      );
+    }
+    return { isAuthenticated: true, userName: AUTHENTICATED_USER_NAME };
+  };
+}
+__name(bearerTokenUserBuilder, "bearerTokenUserBuilder");
+export {
+  bearerTokenUserBuilder
+};

package/dist/web/a2a/event_converter_utils.js

@@ -19,6 +19,7 @@ var __spreadValues = (a, b) => {
   return a;
 };
 var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -62,33 +63,37 @@ function toA2AMessage(event, {
     metadata: getA2AEventMetadata(event, { appName, userId, sessionId })
   };
 }
-function toAdkEvent(event, invocationId, agentName) {
+__name(toA2AMessage, "toA2AMessage");
+function toAdkEvent(event, invocationId, agentName, branch) {
   if (isMessage(event)) {
-    return messageToAdkEvent(event, invocationId, agentName);
+    return messageToAdkEvent(event, invocationId, agentName, branch);
   }
   if (isTask(event)) {
-    return taskToAdkEvent(event, invocationId, agentName);
+    return taskToAdkEvent(event, invocationId, agentName, branch);
   }
   if (isTaskArtifactUpdateEvent(event)) {
-    return artifactUpdateToAdkEvent(event, invocationId, agentName);
+    return artifactUpdateToAdkEvent(event, invocationId, agentName, branch);
   }
   if (isTaskStatusUpdateEvent(event)) {
-    return event.final ? finalTaskStatusUpdateToAdkEvent(event, invocationId, agentName) : taskStatusUpdateToAdkEvent(event, invocationId, agentName);
+    return event.final ? finalTaskStatusUpdateToAdkEvent(event, invocationId, agentName, branch) : taskStatusUpdateToAdkEvent(event, invocationId, agentName, branch);
   }
   return void 0;
 }
-function messageToAdkEvent(msg, invocationId, agentName) {
+__name(toAdkEvent, "toAdkEvent");
+function messageToAdkEvent(msg, invocationId, agentName, branch) {
   const parts = toGenAIParts(msg.parts);
   const content = parts.length === 0 ? void 0 : msg.role === MessageRole.USER ? createUserContent(parts) : createModelContent(parts);
   return __spreadProps(__spreadValues({}, createAdkEventFromMetadata(msg)), {
     invocationId,
     author: msg.role === MessageRole.USER ? MessageRole.USER : agentName,
+    branch,
     content,
     turnComplete: true,
     partial: false
   });
 }
-function artifactUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
+__name(messageToAdkEvent, "messageToAdkEvent");
+function artifactUpdateToAdkEvent(a2aEvent, invocationId, agentName, branch) {
   var _a;
   const partsToConvert = ((_a = a2aEvent.artifact) == null ? void 0 : _a.parts) || [];
   if (partsToConvert.length === 0) {
@@ -98,12 +103,14 @@ function artifactUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
   return __spreadProps(__spreadValues({}, createAdkEventFromMetadata(a2aEvent)), {
     invocationId,
     author: agentName,
+    branch,
     content: createModelContent(toGenAIParts(partsToConvert)),
     longRunningToolIds: getLongRunningToolIDs(partsToConvert),
     partial
   });
 }
-function finalTaskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
+__name(artifactUpdateToAdkEvent, "artifactUpdateToAdkEvent");
+function finalTaskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName, branch) {
   var _a;
   const partsToConvert = ((_a = a2aEvent.status.message) == null ? void 0 : _a.parts) || [];
   if (partsToConvert.length === 0) {
@@ -115,13 +122,15 @@ function finalTaskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
   return __spreadProps(__spreadValues({}, createAdkEventFromMetadata(a2aEvent)), {
     invocationId,
     author: agentName,
+    branch,
     errorMessage: isFailedTask ? getFailedTaskStatusUpdateEventError(a2aEvent) : void 0,
     content: hasContent ? createModelContent(parts) : void 0,
     longRunningToolIds: getLongRunningToolIDs(partsToConvert),
     turnComplete: true
   });
 }
-function taskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
+__name(finalTaskStatusUpdateToAdkEvent, "finalTaskStatusUpdateToAdkEvent");
+function taskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName, branch) {
   const msg = a2aEvent.status.message;
   if (!msg) {
     return void 0;
@@ -133,12 +142,14 @@ function taskStatusUpdateToAdkEvent(a2aEvent, invocationId, agentName) {
   return __spreadProps(__spreadValues({}, createAdkEventFromMetadata(a2aEvent)), {
     invocationId,
     author: agentName,
+    branch,
     content: createModelContent(parts),
     turnComplete: false,
     partial: true
   });
 }
-function taskToAdkEvent(a2aTask, invocationId, agentName) {
+__name(taskStatusUpdateToAdkEvent, "taskStatusUpdateToAdkEvent");
+function taskToAdkEvent(a2aTask, invocationId, agentName, branch) {
   var _a, _b;
   const parts = [];
   const longRunningToolIds = [];
@@ -165,16 +176,27 @@ function taskToAdkEvent(a2aTask, invocationId, agentName) {
   return __spreadProps(__spreadValues({}, createAdkEventFromMetadata(a2aTask)), {
     invocationId,
     author: agentName,
+    branch,
     content: isFailed ? void 0 : createModelContent(parts),
     errorMessage: isFailed ? getFailedTaskStatusUpdateEventError(a2aTask) : void 0,
     longRunningToolIds,
     turnComplete: isTerminal
   });
 }
+__name(taskToAdkEvent, "taskToAdkEvent");
+const PEER_SETTABLE_ACTION_FIELDS = /* @__PURE__ */ new Set(["escalate"]);
 function createAdkEventFromMetadata(a2aEvent) {
   const metadata = a2aEvent.metadata || {};
   return createEvent({
-    branch: metadata[A2AMetadataKeys.BRANCH],
+    // `branch` is intentionally NOT restored from peer metadata here (unlike
+    // the other fields below): it is the mechanism getContents() (see
+    // content_processor_utils.ts) uses to keep sibling sub-agent branches'
+    // conversation contexts isolated from each other. A remote A2A peer that
+    // controls its own outgoing metadata could otherwise forge `adk_branch`
+    // (set it to a shared ancestor branch, or omit it) to leak its content
+    // into an unrelated sibling agent's LLM context. Every caller of the
+    // `*ToAdkEvent` functions in this file force-sets `branch` from its own
+    // local `InvocationContext` instead, the same way `author` is handled.
     author: metadata[A2AMetadataKeys.AUTHOR],
     partial: metadata[A2AMetadataKeys.PARTIAL],
     errorCode: metadata[A2AMetadataKeys.ERROR_CODE],
@@ -183,12 +205,24 @@ function createAdkEventFromMetadata(a2aEvent) {
     groundingMetadata: metadata[A2AMetadataKeys.GROUNDING_METADATA],
     usageMetadata: metadata[A2AMetadataKeys.USAGE_METADATA],
     customMetadata: metadata[A2AMetadataKeys.CUSTOM_METADATA],
-    actions: createEventActions({
-      escalate: !!metadata[A2AMetadataKeys.ESCALATE],
-      transferToAgent: metadata[A2AMetadataKeys.TRANSFER_TO_AGENT]
-    })
+    // Only fields in PEER_SETTABLE_ACTION_FIELDS may be restored from
+    // metadata a remote A2A peer controls. Every other action field either
+    // mutates the caller's own session or drives the caller's own control
+    // flow (e.g. `transferToAgent`, see llm_agent.ts), so it must never be
+    // rebuilt from peer-supplied data. Filtering through an allowlist here
+    // (rather than just omitting the unsafe field) means a future action
+    // field is unsafe-by-default: adding it to `candidateActions` alone
+    // does nothing until it's also added to the allowlist.
+    actions: createEventActions(
+      Object.fromEntries(
+        Object.entries({
+          escalate: !!metadata[A2AMetadataKeys.ESCALATE]
+        }).filter(([key]) => PEER_SETTABLE_ACTION_FIELDS.has(key))
+      )
+    )
   });
 }
+__name(createAdkEventFromMetadata, "createAdkEventFromMetadata");
 function getLongRunningToolIDs(parts) {
   const ids = [];
   for (const a2aPart of parts) {
@@ -201,6 +235,7 @@ function getLongRunningToolIDs(parts) {
   }
   return ids;
 }
+__name(getLongRunningToolIDs, "getLongRunningToolIDs");
 export {
   toA2AMessage,
   toAdkEvent

package/dist/web/a2a/event_processor_utils.js

@@ -19,11 +19,16 @@ var __spreadValues = (a, b) => {
   return a;
 };
 var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
+import {
+  getPendingUserInputRequests,
+  getUserInputRequests
+} from "../agents/user_input_request.js";
 import { createEventActions } from "../events/event_actions.js";
 import {
   createInputMissingErrorEvent,
@@ -67,6 +72,7 @@ function getFinalTaskStatusUpdate(adkEvents, context) {
     metadata: __spreadValues(__spreadValues({}, getA2ASessionMetadata(context)), getA2AEventMetadataFromActions(finalEventActions))
   });
 }
+__name(getFinalTaskStatusUpdate, "getFinalTaskStatusUpdate");
 function scanForInputRequiredEvents(adkEvents, context) {
   var _a, _b;
   const inputRequiredParts = [];
@@ -104,6 +110,7 @@ function scanForInputRequiredEvents(adkEvents, context) {
   }
   return void 0;
 }
+__name(scanForInputRequiredEvents, "scanForInputRequiredEvents");
 function getLongRunnningFunctionCallId(genAIPart, longRunningToolIds = [], inputRequiredParts = []) {
   var _a, _b, _c;
   const functionCallId = (_a = genAIPart.functionCall) == null ? void 0 : _a.id;
@@ -124,47 +131,79 @@ function getLongRunnningFunctionCallId(genAIPart, longRunningToolIds = [], input
   }
   return;
 }
-function getTaskInputRequiredEvent(task, genAIContent) {
-  var _a;
-  if (!task || !isInputRequiredTaskStatusUpdateEvent(task) || !task.status.message) {
+__name(getLongRunnningFunctionCallId, "getLongRunnningFunctionCallId");
+function getUnansweredRequestEvent(options) {
+  var _a, _b, _c;
+  const { taskId, contextId, task, sessionEvents, genAIContent } = options;
+  const pending = pendingRequestParts(task, sessionEvents);
+  const answered = new Set(
+    ((_a = genAIContent == null ? void 0 : genAIContent.parts) != null ? _a : []).map((part) => {
+      var _a2;
+      return (_a2 = part.functionResponse) == null ? void 0 : _a2.id;
+    }).filter((id) => !!id)
+  );
+  const missingId = [...pending.keys()].find((id) => !answered.has(id));
+  if (!missingId) {
     return void 0;
   }
-  const statusMsg = task.status.message;
-  const taskParts = toGenAIParts(statusMsg.parts);
-  for (const taskPart of taskParts) {
-    const functionCallId = (_a = taskPart.functionCall) == null ? void 0 : _a.id;
-    if (!functionCallId) {
-      continue;
+  return createInputMissingErrorEvent({
+    taskId: (_b = task == null ? void 0 : task.id) != null ? _b : taskId,
+    contextId: (_c = task == null ? void 0 : task.contextId) != null ? _c : contextId,
+    parts: [
+      ...toA2AParts([...pending.values()]),
+      {
+        kind: "text",
+        text: "No input provided for function call id ".concat(missingId),
+        metadata: {
+          validation_error: true
+        }
+      }
+    ]
+  });
+}
+__name(getUnansweredRequestEvent, "getUnansweredRequestEvent");
+function pendingRequestParts(task, sessionEvents) {
+  var _a, _b, _c, _d, _e, _f;
+  const pending = /* @__PURE__ */ new Map();
+  if (task && isInputRequiredTaskStatusUpdateEvent(task) && task.status.message) {
+    for (const part of toGenAIParts(task.status.message.parts)) {
+      if ((_a = part.functionCall) == null ? void 0 : _a.id) {
+        pending.set(part.functionCall.id, part);
+      }
+    }
+  }
+  const pendingIds = new Set(
+    getPendingUserInputRequests(sessionEvents).map(
+      (request) => request.interruptId
+    )
+  );
+  for (const event of sessionEvents) {
+    for (const part of (_c = (_b = event.content) == null ? void 0 : _b.parts) != null ? _c : []) {
+      const id = interruptIdOfPart(event, part);
+      if (id && pendingIds.has(id)) {
+        pending.set(id, part);
+      }
     }
-    const hasMatchingResponse = ((genAIContent == null ? void 0 : genAIContent.parts) || []).some(
-      (p) => {
-        var _a2;
-        return ((_a2 = p.functionResponse) == null ? void 0 : _a2.id) === functionCallId;
+  }
+  for (const event of sessionEvents) {
+    for (const part of (_e = (_d = event.content) == null ? void 0 : _d.parts) != null ? _e : []) {
+      if ((_f = part.functionResponse) == null ? void 0 : _f.id) {
+        pending.delete(part.functionResponse.id);
       }
-    );
-    if (!hasMatchingResponse) {
-      return createInputMissingErrorEvent({
-        taskId: task.id,
-        contextId: task.contextId,
-        parts: [
-          ...statusMsg.parts.filter((p) => {
-            var _a2;
-            return !((_a2 = p.metadata) == null ? void 0 : _a2.validation_error);
-          }),
-          {
-            kind: "text",
-            text: "No input provided for function call id ".concat(functionCallId),
-            metadata: {
-              validation_error: true
-            }
-          }
-        ]
-      });
     }
   }
-  return void 0;
+  return pending;
+}
+__name(pendingRequestParts, "pendingRequestParts");
+function interruptIdOfPart(event, part) {
+  if (!part.functionCall) {
+    return void 0;
+  }
+  const [request] = getUserInputRequests(__spreadProps(__spreadValues({}, event), { content: { parts: [part] } }));
+  return request == null ? void 0 : request.interruptId;
 }
+__name(interruptIdOfPart, "interruptIdOfPart");
 export {
   getFinalTaskStatusUpdate,
-  getTaskInputRequiredEvent
+  getUnansweredRequestEvent
 };

package/dist/web/a2a/executor_context.js

@@ -1,5 +1,7 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -20,6 +22,7 @@ function createExecutorContext({
     requestContext
   };
 }
+__name(createExecutorContext, "createExecutorContext");
 export {
   createExecutorContext
 };

package/dist/web/a2a/index.js

@@ -0,0 +1,20 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { AGENT_CARD_PATH, RemoteA2AAgent } from "./a2a_remote_agent.js";
+import { getA2AAgentCard } from "./agent_card.js";
+import { A2AAgentExecutor } from "./agent_executor.js";
+import { toA2a } from "./agent_to_a2a.js";
+import { bearerTokenUserBuilder } from "./auth.js";
+export {
+  A2AAgentExecutor,
+  AGENT_CARD_PATH,
+  RemoteA2AAgent,
+  bearerTokenUserBuilder,
+  getA2AAgentCard,
+  toA2a
+};

package/dist/web/a2a/metadata_converter_utils.js

@@ -19,6 +19,7 @@ var __spreadValues = (a, b) => {
   return a;
 };
 var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -60,6 +61,7 @@ function getAdkEventMetadata(a2aEvent) {
     [AdkMetadataKeys.CONTEXT_ID]: a2aEvent.contextId
   };
 }
+__name(getAdkEventMetadata, "getAdkEventMetadata");
 function getA2AEventMetadata(adkEvent, {
   appName,
   userId,
@@ -83,6 +85,7 @@ function getA2AEventMetadata(adkEvent, {
     [A2AMetadataKeys.IS_LONG_RUNNING]: (adkEvent.longRunningToolIds || []).length > 0
   });
 }
+__name(getA2AEventMetadata, "getA2AEventMetadata");
 function getA2ASessionMetadata({
   appName,
   userId,
@@ -94,12 +97,14 @@ function getA2ASessionMetadata({
     [A2AMetadataKeys.SESSION_ID]: sessionId
   };
 }
+__name(getA2ASessionMetadata, "getA2ASessionMetadata");
 function getA2AEventMetadataFromActions(actions) {
   return {
     [A2AMetadataKeys.ESCALATE]: actions.escalate,
     [A2AMetadataKeys.TRANSFER_TO_AGENT]: actions.transferToAgent
   };
 }
+__name(getA2AEventMetadataFromActions, "getA2AEventMetadataFromActions");
 export {
   A2AMetadataKeys,
   AdkMetadataKeys,