@google/adk 2.0.0 → 2.1.0

package/dist/types/agents/run_config.d.ts

@@ -8,12 +8,17 @@ import { AudioTranscriptionConfig, ContextWindowCompressionConfig, Modality, Pro
  * The streaming mode for the run config.
  */
 export declare enum StreamingMode {
+    /** Deliver the response as a single event once the turn completes. */
     NONE = "none",
+    /**
+     * Deliver the response incrementally, as a series of partial events
+     * followed by a final event carrying the complete text.
+     */
     SSE = "sse",
     /**
-     * Bidirectional streaming. Not yet supported; passing this value to
-     * `createRunConfig` throws. Use {@link StreamingMode.SSE} for token
-     * streaming.
+     * Reserved. Bidirectional streaming is reached through `Runner.runLive()`,
+     * not through this value: `runLive` itself calls `createRunConfig`, which
+     * rejects `BIDI`. Use {@link StreamingMode.SSE} for incremental responses.
      */
     BIDI = "bidi"
 }
@@ -43,9 +48,11 @@ export interface RunConfig {
      */
     supportCfc?: boolean;
     /**
-     * Streaming mode. Supported values are {@link StreamingMode.NONE} and
-     * {@link StreamingMode.SSE}. {@link StreamingMode.BIDI} is not yet
-     * supported and is rejected by `createRunConfig`.
+     * How the response is delivered. Defaults to {@link StreamingMode.NONE},
+     * which emits one event when the turn completes; set
+     * {@link StreamingMode.SSE} to receive partial events as the response is
+     * produced. {@link StreamingMode.BIDI} is rejected by `createRunConfig`;
+     * bidirectional streaming is reached through `Runner.runLive()` instead.
      */
     streamingMode?: StreamingMode;
     /**
@@ -79,8 +86,9 @@ export interface RunConfig {
      * A limit on the total number of llm calls for a given run.
      *
      * Valid Values:
-     *   - More than 0 and less than sys.maxsize: The bound on the number of llm
-     *     calls is enforced, if the value is set in this range.
+     *   - More than 0 and at most `Number.MAX_SAFE_INTEGER`: The bound on the
+     *     number of llm calls is enforced. `createRunConfig()` throws for
+     *     anything larger.
      *   - Less than or equal to 0: This allows for unbounded number of llm calls.
      */
     maxLlmCalls?: number;
@@ -96,6 +104,10 @@ export interface RunConfig {
      * decision; interactive front-ends (e.g. `adk run`) opt in explicitly.
      */
     plainTextToolConfirmation?: boolean;
+    /**
+     * Request-level metadata passed from an incoming A2A request or caller.
+     */
+    a2aMetadata?: Record<string, unknown>;
     /**
      * If true, a `requireConfirmation` gate may be answered by a message that
      * arrived over A2A.
@@ -159,6 +171,7 @@ export declare function createRunConfig(params?: Partial<RunConfig>): {
     contextWindowCompression?: ContextWindowCompressionConfig | undefined;
     pauseOnToolCalls: boolean;
     plainTextToolConfirmation?: boolean | undefined;
+    a2aMetadata?: Record<string, unknown> | undefined;
     allowRemoteToolConfirmation?: boolean | undefined;
     remoteDelivered?: boolean | undefined;
 };

package/dist/types/artifacts/scoped_artifact_service.d.ts

@@ -6,6 +6,14 @@
 import { Part } from '@google/genai';
 import { ArtifactVersion, BaseArtifactService } from './base_artifact_service.js';
 import { SessionArtifactService, SessionLoadArtifactRequest, SessionSaveArtifactRequest } from './session_artifact_service.js';
+/**
+ * A unique symbol to identify session-scoped artifact services.
+ *
+ * Resolves to the same symbol as the one used by `isSessionArtifactService` in
+ * `session_artifact_service.ts` because `Symbol.for` looks up the global
+ * symbol registry.
+ */
+declare const SESSION_ARTIFACT_SERVICE_SIGNATURE_SYMBOL: unique symbol;
 /**
  * A wrapper that scopes a BaseArtifactService to a specific session.
  */
@@ -14,6 +22,10 @@ export declare class ScopedArtifactService implements SessionArtifactService {
     private readonly appName;
     private readonly userId;
     private readonly sessionId;
+    /**
+     * Brands this class as a session-scoped artifact service.
+     */
+    readonly [SESSION_ARTIFACT_SERVICE_SIGNATURE_SYMBOL] = true;
     constructor(delegate: BaseArtifactService, appName: string, userId: string, sessionId: string);
     saveArtifact(request: SessionSaveArtifactRequest): Promise<number>;
     loadArtifact(request: SessionLoadArtifactRequest): Promise<Part | undefined>;
@@ -23,3 +35,4 @@ export declare class ScopedArtifactService implements SessionArtifactService {
     listArtifactVersions(filename: string): Promise<ArtifactVersion[]>;
     getArtifactVersion(request: SessionLoadArtifactRequest): Promise<ArtifactVersion | undefined>;
 }
+export {};

package/dist/types/artifacts/session_artifact_service.d.ts

@@ -4,7 +4,7 @@
  * SPDX-License-Identifier: Apache-2.0
  */
 import { Part } from '@google/genai';
-import { ArtifactVersion } from './base_artifact_service.js';
+import { ArtifactVersion, BaseArtifactService } from './base_artifact_service.js';
 export interface SessionSaveArtifactRequest {
     filename: string;
     artifact: Part;
@@ -23,3 +23,10 @@ export interface SessionArtifactService {
     listArtifactVersions(filename: string): Promise<ArtifactVersion[]>;
     getArtifactVersion(request: SessionLoadArtifactRequest): Promise<ArtifactVersion | undefined>;
 }
+/**
+ * Type guard to check if an object implements SessionArtifactService.
+ *
+ * @param service The artifact service to check.
+ * @returns True if the service is a session-scoped artifact service.
+ */
+export declare function isSessionArtifactService(service: BaseArtifactService | SessionArtifactService): service is SessionArtifactService;

package/dist/types/auth/auth_credential.d.ts

@@ -43,6 +43,11 @@ export interface OAuth2Auth {
     nonce?: string;
     state?: string;
     codeVerifier?: string;
+    /**
+     * The PKCE code challenge method. Only 'S256' is supported; any other value
+     * is rejected when the authorization URI is generated.
+     */
+    codeChallengeMethod?: string;
     /**
      * tool or adk can decide the redirect_uri if they don't want client to decide
      */
@@ -60,7 +65,7 @@ export interface OAuth2Auth {
 /**
  * Represents Google Service Account configuration.
  * @example
- * config = {
+ * const config: ServiceAccountCredential = {
  *   type: "service_account",
  *   projectId: "your_project_id",
  *   privateKeyId: "your_private_key_id",
@@ -72,7 +77,7 @@ export interface OAuth2Auth {
  *   authProviderX509CertUrl: "https://www.googleapis.com/oauth2/v1/certs",
  *   clientX509CertUrl: "https://www.googleapis.com/robot/v1/metadata/x509/...",
  *   universeDomain: "googleapis.com",
- * }
+ * };
  */
 export interface ServiceAccountCredential {
     /**
@@ -164,10 +169,11 @@ export declare enum AuthCredentialTypes {
     SERVICE_ACCOUNT = "serviceAccount"
 }
 /**
- * Data class representing an authentication credential.
+ * An authentication credential, in one of several shapes selected by
+ * `authType`.
  *
- * To exchange for the actual credential, please use
- * CredentialExchanger.exchangeCredential().
+ * To turn one of these into the credential a request actually carries, use the
+ * `exchange()` method of a {@link BaseCredentialExchanger}.
  *
  * @example
  * // API Key Auth
@@ -211,7 +217,7 @@ export declare enum AuthCredentialTypes {
  *   }
  * }
  *
- * @example:
+ * @example
  * // Open ID Connect Auth
  * const authCredential: AuthCredential = {
  *   authType: AuthCredentialTypes.OPEN_ID_CONNECT,
@@ -219,11 +225,10 @@ export declare enum AuthCredentialTypes {
  *     clientId: "1234",
  *     clientSecret: "secret",
  *     redirectUri: "https://example.com",
- *     scopes: ["scope1", "scope2"],
  *   }
  * }
  *
- * @example:
+ * @example
  * // Auth with resource reference
  * const authCredential: AuthCredential = {
  *   authType: AuthCredentialTypes.API_KEY,

package/dist/types/auth/auth_handler.d.ts

@@ -15,14 +15,25 @@ export declare class AuthHandler {
     private readonly authConfig;
     constructor(authConfig: AuthConfig);
     getAuthResponse(state: State): AuthCredential | undefined;
+    /**
+     * Stores the exchanged credential in the session state.
+     *
+     * @param state The session state to store the credential in.
+     * @throws Error: If the auth config has no credentialKey.
+     */
     parseAndStoreAuthResponse(state: State): Promise<void>;
     generateAuthRequest(): AuthConfig;
     /**
      * Generates an response containing the auth uri for user to sign in.
      *
+     * When the credential requests PKCE, the URI also carries the S256 code
+     * challenge derived from the credential's code verifier, and the returned
+     * credential carries the verifier the later token exchange must send.
+     *
      * @return An AuthCredential object containing the auth URI and state.
      * @throws Error: If the authorization endpoint is not configured in the
-     *     auth scheme.
+     *     auth scheme, or the credential requests a code challenge method other
+     *     than 'S256'.
      */
     generateAuthUri(): AuthCredential | undefined;
 }

package/dist/types/auth/oauth2/oauth2_credential_refresher.d.ts

@@ -15,7 +15,7 @@ export declare class OAuth2CredentialRefresher implements BaseCredentialRefreshe
      *
      * @param authCredential The OAuth2 credential to check.
      * @param authScheme The OAuth2 authentication scheme (optional).
-     * @returns True if the credential needs to be refreshed, False otherwise.
+     * @returns True if the credential needs to be refreshed, false otherwise.
      */
     isRefreshNeeded(authCredential: AuthCredential): Promise<boolean>;
     /**

package/dist/types/auth/oauth2/oauth2_utils.d.ts

@@ -5,6 +5,15 @@
  */
 import { OAuth2Auth } from '../auth_credential.js';
 import { AuthScheme } from '../auth_schemes.js';
+/**
+ * Generates a cryptographically secure PKCE code verifier (RFC 7636).
+ */
+export declare function generateCodeVerifier(): string;
+/**
+ * Derives the S256 PKCE code challenge for a code verifier (RFC 7636): the
+ * unpadded base64url encoding of the verifier's SHA-256 digest.
+ */
+export declare function createS256CodeChallenge(codeVerifier: string): string;
 /**
  * Returns the token endpoint for the given auth scheme.
  */

package/dist/types/auth/refresher/base_credential_refresher.d.ts

@@ -23,7 +23,7 @@ export interface BaseCredentialRefresher {
      *
      * @param authCredential The credential to check.
      * @param authScheme The authentication scheme (optional).
-     * @returns True if the credential needs to be refreshed, False otherwise.
+     * @returns True if the credential needs to be refreshed, false otherwise.
      */
     isRefreshNeeded(authCredential: AuthCredential, authScheme?: AuthScheme): Promise<boolean>;
     /**

package/dist/types/code_executors/code_execution_utils.d.ts

@@ -97,7 +97,7 @@ export declare function getEncodedFileContent(data: string): string;
  * @param content The mutable content to extract the code from.
  * @param codeBlockDelimiters The list of the enclosing delimiters to identify
  *     the code blocks.
- * @return The first code block if found, otherwise None.
+ * @return The first code block if found, otherwise an empty string.
  */
 export declare function extractCodeAndTruncateContent(content: Content, codeBlockDelimiters: Array<[string, string]>): string;
 /**

package/dist/types/code_executors/container_code_executor.d.ts

@@ -0,0 +1,89 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type Docker from 'dockerode';
+import { BaseCodeExecutor, ExecuteCodeParams } from './base_code_executor.js';
+import { CodeExecutionResult } from './code_execution_utils.js';
+/**
+ * Options for {@link ContainerCodeExecutor}.
+ */
+export interface ContainerCodeExecutorOptions {
+    /** Optional base url of a user-hosted Docker daemon (e.g. `tcp://host:2375`). */
+    baseUrl?: string;
+    /**
+     * Tag of the predefined or custom image to run on the container. Either
+     * `image` or `dockerPath` must be set. Defaults to `adk-code-executor:latest`
+     * when only `dockerPath` is given.
+     */
+    image?: string;
+    /**
+     * Path to a directory containing a Dockerfile. If set, the image is built
+     * from it instead of using a prebuilt tag. Either `image` or `dockerPath`
+     * must be set.
+     */
+    dockerPath?: string;
+    /**
+     * Start the container with networking enabled. Defaults to false so
+     * untrusted, model-generated code cannot reach the network (the cloud
+     * metadata endpoint, internal services, or exfiltration destinations).
+     */
+    networkEnabled?: boolean;
+    /**
+     * Wall-clock timeout in seconds for a single execution. Must be greater than
+     * 0; defaults to 300. Every execution shares one long-lived container, so an
+     * unbounded run (e.g. a loop emitted by the model) would burn that
+     * container's CPU for every later caller. Raise it rather than remove it for
+     * a computation that legitimately runs longer.
+     */
+    timeoutSeconds?: number;
+    /**
+     * Injected Docker client, primarily for testing so unit tests never touch a
+     * real Docker daemon. Defaults to a new client built from `baseUrl`.
+     */
+    docker?: Docker;
+}
+/**
+ * A code executor that runs model-generated code inside a hardened Docker
+ * container via the `dockerode` client.
+ *
+ * Security note: this executor runs model-generated code, which may be
+ * influenced by untrusted input (e.g. via prompt injection). By default the
+ * container is started with networking disabled and all Linux capabilities
+ * dropped so the executed code cannot reach the network (including the cloud
+ * metadata endpoint at `169.254.169.254`) or escalate privileges. Networking
+ * can be re-enabled via `networkEnabled: true` when the executed code is
+ * trusted.
+ *
+ * Limitations: this executor runs a code string only. `inputFiles` and `args`
+ * on the request are not copied into the container, and output files are not
+ * collected (`outputFiles` is always empty), so tools that stage resource
+ * files or read artifacts back (e.g. `RunSkillScriptTool`) are not yet
+ * supported. Sending files in and out via `putArchive`/`getArchive` is future
+ * work.
+ */
+export declare class ContainerCodeExecutor extends BaseCodeExecutor {
+    private readonly dockerPath?;
+    private readonly containerOptions;
+    private readonly timeoutSeconds;
+    private container?;
+    private initPromise?;
+    constructor(options?: ContainerCodeExecutorOptions);
+    executeCode(params: ExecuteCodeParams): Promise<CodeExecutionResult>;
+    /**
+     * Turns a non-zero exit into stderr the model can see. An empty stderr maps
+     * to `OUTCOME_OK` downstream, so a program that exits non-zero without
+     * writing stderr would otherwise look successful (matching
+     * `UnsafeLocalCodeExecutor`).
+     */
+    private describeExit;
+    /**
+     * Stops and removes the container. Safe to call when no container has been
+     * started; provided for deterministic teardown in tests and app shutdown.
+     */
+    close(): Promise<void>;
+    /** Lazily builds/starts the container exactly once. */
+    private ensureContainer;
+    private initContainer;
+}

package/dist/types/code_executors/docker_container.d.ts

@@ -0,0 +1,79 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type Docker from 'dockerode';
+/**
+ * Exit code reported when a run is killed for exceeding its deadline. Matches
+ * the convention of coreutils `timeout(1)`, which the executor uses to bound a
+ * run inside the container.
+ */
+export declare const TIMEOUT_EXIT_CODE = 124;
+/** Decoded output of a single command executed inside the container. */
+export interface ExecOutput {
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+}
+/** Options for {@link DockerContainer}. */
+export interface DockerContainerOptions {
+    /** Tag of the predefined or custom image to run on the container. */
+    image: string;
+    /**
+     * Start the container with networking enabled. When false, the container
+     * cannot reach the network, which is the safe default for untrusted code.
+     */
+    networkEnabled: boolean;
+    /** Optional base url of a user-hosted Docker daemon. */
+    baseUrl?: string;
+    /**
+     * Injected Docker client. When omitted, dockerode is loaded lazily and a
+     * client is built from `baseUrl`.
+     */
+    docker?: Docker;
+}
+/**
+ * The Docker container backing a code executor, wrapping the whole lifecycle
+ * (`build` -> `start` -> `execute` -> `stop`) and the Docker client resolution
+ * behind one small API, so callers only decide *what* to run, not *how* to
+ * drive Docker.
+ */
+export declare class DockerContainer {
+    private readonly options;
+    private client?;
+    private container?;
+    constructor(options: DockerContainerOptions);
+    /**
+     * Builds the image from a directory containing a Dockerfile. `src` is the raw
+     * directory listing; unlike the Docker CLI this does not honor
+     * `.dockerignore`.
+     */
+    build(dockerPath: string): Promise<void>;
+    /**
+     * Creates and starts the container, registering it for cleanup on process
+     * exit. Throws if already started: overwriting the handle would orphan the
+     * running container. Call {@link stop} first.
+     */
+    start(): Promise<void>;
+    /**
+     * Runs a command inside the container and returns its decoded output. The
+     * exec is created without a TTY so the stream stays multiplexed and can be
+     * split into stdout and stderr via `modem.demuxStream`.
+     *
+     * `timeoutSeconds` bounds the wait, not the in-container run: a process that
+     * keeps the exec's stdio open (e.g. a surviving background child) means
+     * `'end'` never fires, so without this cap the promise never settles (the
+     * same hang #793 fixed in the local executor). Callers that need to bound the
+     * run itself must wrap the command (see {@link ContainerCodeExecutor}). On a
+     * cap breach the result carries {@link TIMEOUT_EXIT_CODE}.
+     */
+    execute(cmd: string[], timeoutSeconds: number): Promise<ExecOutput>;
+    /** Stops and removes the container. Safe to call when never started. */
+    stop(): Promise<void>;
+    /**
+     * Resolves the Docker client once, lazily loading dockerode when no client
+     * was injected.
+     */
+    private getClient;
+}

package/dist/types/common.d.ts

@@ -8,7 +8,7 @@ export type { ActiveStreamingToolParams } from './agents/active_streaming_tool.j
 export { BaseAgent, isBaseAgent } from './agents/base_agent.js';
 export type { AfterAgentCallback, BaseAgentConfig, BeforeAgentCallback, SingleAgentCallback, } from './agents/base_agent.js';
 export { Context } from './agents/context.js';
-export { REQUEST_CONFIRMATION_FUNCTION_CALL_NAME, REQUEST_CREDENTIAL_FUNCTION_CALL_NAME, REQUEST_INPUT_FUNCTION_CALL_NAME, findEventByFunctionCallId, findMatchingFunctionCall, functionsExportedForTestingOnly, } from './agents/functions.js';
+export { REQUEST_CONFIRMATION_FUNCTION_CALL_NAME, REQUEST_CREDENTIAL_FUNCTION_CALL_NAME, REQUEST_INPUT_FUNCTION_CALL_NAME, findEventByFunctionCallId, findMatchingFunctionCall, functionsExportedForTestingOnly, isToolNotFound, } from './agents/functions.js';
 export { InvocationContext, requireAgent } from './agents/invocation_context.js';
 export type { InvocationContextParams, WorkflowInstructionScope, } from './agents/invocation_context.js';
 export { LiveRequestQueue } from './agents/live_request_queue.js';
@@ -36,6 +36,8 @@ export { createResumabilityConfig } from './apps/resumability_config.js';
 export type { ResumabilityConfig } from './apps/resumability_config.js';
 export type { BaseArtifactService, DeleteArtifactRequest, ListArtifactKeysRequest, ListVersionsRequest, LoadArtifactRequest, SaveArtifactRequest, } from './artifacts/base_artifact_service.js';
 export { InMemoryArtifactService } from './artifacts/in_memory_artifact_service.js';
+export { ScopedArtifactService } from './artifacts/scoped_artifact_service.js';
+export { isSessionArtifactService } from './artifacts/session_artifact_service.js';
 export type { SessionArtifactService, SessionLoadArtifactRequest, SessionSaveArtifactRequest, } from './artifacts/session_artifact_service.js';
 export { AuthCredentialTypes } from './auth/auth_credential.js';
 export type { AuthCredential, HttpAuth, HttpCredentials, OAuth2Auth, ServiceAccount, ServiceAccountCredential, } from './auth/auth_credential.js';
@@ -74,6 +76,11 @@ export { TruncatingContextCompactor } from './context/truncating_context_compact
 export type { TruncatingContextCompactorOptions } from './context/truncating_context_compactor.js';
 export { BaseEnvironment } from './environment/base_environment.js';
 export type { ExecutionResult } from './environment/base_environment.js';
+export { AlreadyExistsError } from './errors/already_exists_error.js';
+export { InputValidationError } from './errors/input_validation_error.js';
+export { NotFoundError } from './errors/not_found_error.js';
+export { SessionNotFoundError } from './errors/session_not_found_error.js';
+export { ToolErrorType, ToolExecutionError, } from './errors/tool_execution_error.js';
 export { isCompactedEvent, isScratchpadEvent } from './events/compacted_event.js';
 export type { CompactedEvent } from './events/compacted_event.js';
 export { createEvent, generateClientFunctionCallId, getFunctionCalls, getFunctionResponses, hasThoughts, hasTrailingCodeExecutionResult, isFinalResponse, populateClientFunctionCallId, pruneThoughts, stringifyContent, } from './events/event.js';
@@ -87,12 +94,12 @@ export type { Example } from './examples/example.js';
 export type { BaseMemoryService, SearchMemoryRequest, SearchMemoryResponse, } from './memory/base_memory_service.js';
 export { InMemoryMemoryService } from './memory/in_memory_memory_service.js';
 export type { MemoryEntry } from './memory/memory_entry.js';
-export { VertexAiMemoryBankService } from './memory/vertex_ai_memory_bank_service.js';
-export type { VertexAiMemoryBankServiceOptions } from './memory/vertex_ai_memory_bank_service.js';
 export { ApigeeLlm } from './models/apigee_llm.js';
 export type { ApigeeLlmParams } from './models/apigee_llm.js';
 export { BaseLlm, isBaseLlm } from './models/base_llm.js';
 export type { BaseLlmConnection } from './models/base_llm_connection.js';
+export { ChromeBuiltInLlm, ChromeModelUnavailableError, stripAdkIdentityPreamble, } from './models/chrome_prompt_llm.js';
+export type { ChromeBuiltInDiagnostic, ChromeBuiltInLlmParams, ChromeCreateCoreOptions, ChromeCreateMonitor, ChromeCreateOptions, ChromeExpectedModality, ChromeLanguageModelFactory, ChromeLanguageModelSession, ChromeMessage, ChromeMessageContent, ChromeModelAvailability, ChromePromptOptions, } from './models/chrome_prompt_llm.js';
 export { Gemini, geminiInitParams } from './models/google_llm.js';
 export type { GeminiParams } from './models/google_llm.js';
 export type { LlmRequest } from './models/llm_request.js';
@@ -101,10 +108,13 @@ export { LLMRegistry } from './models/registry.js';
 export type { BaseLlmType } from './models/registry.js';
 export { RoutedLlm } from './models/routed_llm.js';
 export type { LlmRouter } from './models/routed_llm.js';
+export { GLOBAL_SCOPE_KEY, REFLECT_AND_RETRY_RESPONSE_TYPE, ScopedFailureTracker, TrackingScope, resolveScopeKey, type PerItemFailuresCounter, type ToolFailureResponse, } from './plugins/_reflect_retry_utils.js';
 export { BasePlugin, ContextCompactionTrigger } from './plugins/base_plugin.js';
 export { GlobalInstructionPlugin } from './plugins/global_instruction_plugin.js';
 export { LoggingPlugin } from './plugins/logging_plugin.js';
 export { PluginManager } from './plugins/plugin_manager.js';
+export { ADK_HANDLE_MODEL_ERROR_TOOL_NAME, RESERVED_TOOL_CALL_ERROR_TYPE, ReflectAndRetryModelPlugin, type ReflectAndRetryModelPluginOptions, } from './plugins/reflect_retry_model_plugin.js';
+export { ReflectAndRetryToolPlugin, type ReflectAndRetryToolPluginOptions, } from './plugins/reflect_retry_tool_plugin.js';
 export { InMemoryPolicyEngine, PolicyOutcome, SecurityPlugin, getAskUserConfirmationFunctionCalls, } from './plugins/security_plugin.js';
 export type { BasePolicyEngine, PolicyCheckResult, ToolCallPolicyContext, } from './plugins/security_plugin.js';
 export { InMemoryRunner } from './runner/in_memory_runner.js';
@@ -122,11 +132,13 @@ export { BaseTool, isBaseTool } from './tools/base_tool.js';
 export type { BaseToolParams, RunAsyncToolRequest, ToolProcessLlmRequest, } from './tools/base_tool.js';
 export { BaseToolset, isBaseToolset } from './tools/base_toolset.js';
 export type { ToolPredicate } from './tools/base_toolset.js';
+export { BuiltInTool } from './tools/built_in_tool.js';
 export { ConsolidateContextTool } from './tools/consolidate_context_tool.js';
 export { ENTERPRISE_WEB_SEARCH, EnterpriseWebSearchTool, } from './tools/enterprise_web_search_tool.js';
 export { ExampleTool } from './tools/example_tool.js';
 export { EXIT_LOOP, ExitLoopTool } from './tools/exit_loop_tool.js';
 export { FINISH_TASK_SUCCESS_RESULT, FINISH_TASK_TOOL_NAME, FinishTaskTool, } from './tools/finish_task_tool.js';
+export { ForwardingArtifactService } from './tools/forwarding_artifact_service.js';
 export { FunctionTool, isFunctionTool } from './tools/function_tool.js';
 export type { RequireConfirmation, ToolExecuteArgument, ToolExecuteFunction, ToolInputParameters, ToolOptions, } from './tools/function_tool.js';
 export { getUserChoiceTool } from './tools/get_user_choice_tool.js';
@@ -134,11 +146,13 @@ export { GOOGLE_MAPS_GROUNDING, GoogleMapsGroundingTool, } from './tools/google_
 export { GOOGLE_SEARCH, GoogleSearchTool } from './tools/google_search_tool.js';
 export { LOAD_ARTIFACTS, LoadArtifactsTool, } from './tools/load_artifacts_tool.js';
 export { LOAD_MEMORY, LoadMemoryTool } from './tools/load_memory_tool.js';
-export { LOAD_WEB_PAGE, loadWebPage } from './tools/load_web_page.js';
-export type { LoadWebPageOptions } from './tools/load_web_page.js';
 export { LongRunningFunctionTool } from './tools/long_running_tool.js';
 export { PRELOAD_MEMORY, PreloadMemoryTool, } from './tools/preload_memory_tool.js';
 export { requestInputTool } from './tools/request_input_tool.js';
+export type { ResumeInputs } from './tools/resume_inputs.js';
+export { BaseRetrievalTool } from './tools/retrieval/base_retrieval_tool.js';
+export { LlamaIndexRetrieval } from './tools/retrieval/llama_index_retrieval.js';
+export type { LlamaIndexNode, LlamaIndexNodeWithScore, LlamaIndexRetrievalParams, LlamaIndexRetriever, } from './tools/retrieval/llama_index_retrieval.js';
 export { IntentMismatchError, ToolConfirmation, isIntentMismatchError, } from './tools/tool_confirmation.js';
 export type { IntentMismatchReason } from './tools/tool_confirmation.js';
 export { URL_CONTEXT, UrlContextTool } from './tools/url_context_tool.js';
@@ -147,7 +161,7 @@ export type { DataStoreParams, SearchEngineParams, VertexAISearchConfig, VertexA
 export { VertexRagRetrievalTool } from './tools/vertex_rag_retrieval_tool.js';
 export { AsyncQueue } from './utils/async_queue.js';
 export { getClientLabels, runWithClientLabel } from './utils/client_labels.js';
-export { LogLevel, getLogger, setLogLevel, setLogger } from './utils/logger.js';
+export { LogLevel, getLogger, resetLogger, setLogLevel, setLogger, } from './utils/logger.js';
 export type { Logger } from './utils/logger.js';
 export { isGemini2OrAbove, isGemini3xFlashLive } from './utils/model_name.js';
 export type { SchemaLike } from './utils/schema.js';
@@ -156,32 +170,20 @@ export { Task } from './utils/task.js';
 export type { TaskExecutable } from './utils/task.js';
 export { GoogleLLMVariant } from './utils/variant_utils.js';
 export { version } from './version.js';
-export { GCPSkillRegistry } from './skills/gcp_skill_registry.js';
-export type { GCPSkillRegistryOptions } from './skills/gcp_skill_registry.js';
-export { loadAllSkillsInDir, loadSkillFromDir, loadSkillFromZipBuffer, validateSkillDir, } from './skills/loader.js';
 export type { Frontmatter, Resources, Script, Skill } from './skills/skill.js';
 export type { SkillRegistry } from './skills/skill_registry.js';
 export { ListSkillsTool } from './tools/skill/list_skills_tool.js';
-export { LoadSkillResourceTool } from './tools/skill/load_skill_resource_tool.js';
 export { LoadSkillTool } from './tools/skill/load_skill_tool.js';
 export { SearchSkillsTool } from './tools/skill/search_skills_tool.js';
-export { SkillToolset } from './tools/skill/skill_toolset.js';
 export * from './artifacts/base_artifact_service.js';
 export * from './features/feature_registry.js';
 export * from './memory/base_memory_service.js';
 export * from './sessions/base_session_service.js';
 export * from './tools/base_tool.js';
-export { OpenApiSpecParser } from './tools/openapi_tool/openapi_spec_parser/openapi_spec_parser.js';
-export type { OperationEndpoint, ParsedOperation, } from './tools/openapi_tool/openapi_spec_parser/openapi_spec_parser.js';
-export { OperationParser } from './tools/openapi_tool/openapi_spec_parser/operation_parser.js';
-export type { ApiParameter } from './tools/openapi_tool/openapi_spec_parser/operation_parser.js';
-export { ToolAuthHandler } from './tools/openapi_tool/openapi_spec_parser/tool_auth_handler.js';
-export type { AuthPreparationResult } from './tools/openapi_tool/openapi_spec_parser/tool_auth_handler.js';
-export { OpenAPIToolset } from './tools/openapi_tool/openapi_toolset.js';
-export { RestApiTool, createRestApiTool, } from './tools/openapi_tool/rest_api_tool.js';
 export { BaseNode, BranchPath, DEFAULT_ROUTE, Edge, FunctionNode, Graph, JoinNode, NodeContext, NodeReportedError, NodeSchemaValidationError, NodeStatus, NodeTimeoutError, NodeTool, ParallelWorker, RequestInput, START, ToolNode, Workflow, WorkflowNode, asRunnableRoot, commonPrefixOf, createNodeErrorEvent, createNodeState, createSubBranch, isNodeErrorEvent, isNodeReportedError, isNodeSchemaValidationError, isNodeState, isNodeTimeoutError, isRequestInput, isRunnableRoot, isWorkflow, node, normalizeRetryExceptions, prepareRetryConfig, } from './workflow/index.js';
 export type { BaseNodeConfig, BuildNodeOptions, ChainElement, CreateNodeErrorEventParams, DynamicEntry, EdgeItem, ErrorClass, FunctionNodeConfig, FunctionNodeHandler, FunctionNodeResult, NodeContextOptions, NodeErrorEvent, NodeLike, NodeOptions, NodeResult, NodeState, ParallelWorkerConfig, PreparedRetryConfig, RequestInputParams, RetryConfig, RouteValue, RoutingMap, RunNodeOptions, RunnableNode, RunnableRoot, ScheduleDynamicNode, ScheduleDynamicNodeOptions, ToolNodeConfig, WorkflowConfig, } from './workflow/index.js';
-export * from './apps/app.js';
+export { App, isApp, validateAppName } from './apps/app.js';
+export type { AppOptions } from './apps/app.js';
 export * from './artifacts/base_artifact_service.js';
 export * from './features/feature_registry.js';
 export * from './memory/base_memory_service.js';

package/dist/types/context/compaction_utils.d.ts

@@ -9,9 +9,17 @@ import { Event } from '../events/event.js';
  * If no compaction has occurred, returns all events.
  *
  * @param events The full history of events.
+ * @param currentIsolationScope The scope of the caller. Events tagged with a
+ *   different scope are withheld.
  * @returns The active events, starting with the latest CompactedEvent if present.
  */
-export declare function getActiveEvents(events: Event[]): Event[];
+export declare function getActiveEvents(events: Event[], currentIsolationScope?: string): Event[];
+/**
+ * Whether an event is visible to a caller's isolation scope.
+ * Untagged events are shared history; tagged events are visible only to their
+ * own scope. An unscoped caller therefore sees only shared history.
+ */
+export declare function isEventVisibleInIsolationScope(event: Event, currentIsolationScope?: string): boolean;
 /**
  * Determines the baseline index to retain from active raw events,
  * ensuring we don't split between a function call and its response.

package/dist/types/errors/already_exists_error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Represents an error that occurs when an entity already exists.
+ */
+export declare class AlreadyExistsError extends Error {
+    /**
+     * @param message An optional custom message to describe the error.
+     */
+    constructor(message?: string);
+}

package/dist/types/errors/input_validation_error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Represents an error raised when user input fails validation.
+ */
+export declare class InputValidationError extends Error {
+    /**
+     * @param message A message describing why the input is invalid.
+     */
+    constructor(message?: string);
+}

package/dist/types/errors/not_found_error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Represents an error that occurs when an entity is not found.
+ */
+export declare class NotFoundError extends Error {
+    /**
+     * @param message An optional custom message to describe the error.
+     */
+    constructor(message?: string);
+}

package/dist/types/errors/session_not_found_error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Raised when a session cannot be found.
+ */
+export declare class SessionNotFoundError extends Error {
+    /**
+     * @param message An optional custom message to describe the error.
+     */
+    constructor(message?: string);
+}