@google/adk 2.0.0 → 2.2.0

package/dist/types/auth/auth_credential.d.ts

@@ -43,6 +43,11 @@ export interface OAuth2Auth {
     nonce?: string;
     state?: string;
     codeVerifier?: string;
+    /**
+     * The PKCE code challenge method. Only 'S256' is supported; any other value
+     * is rejected when the authorization URI is generated.
+     */
+    codeChallengeMethod?: string;
     /**
      * tool or adk can decide the redirect_uri if they don't want client to decide
      */
@@ -60,7 +65,7 @@ export interface OAuth2Auth {
 /**
  * Represents Google Service Account configuration.
  * @example
- * config = {
+ * const config: ServiceAccountCredential = {
  *   type: "service_account",
  *   projectId: "your_project_id",
  *   privateKeyId: "your_private_key_id",
@@ -72,7 +77,7 @@ export interface OAuth2Auth {
  *   authProviderX509CertUrl: "https://www.googleapis.com/oauth2/v1/certs",
  *   clientX509CertUrl: "https://www.googleapis.com/robot/v1/metadata/x509/...",
  *   universeDomain: "googleapis.com",
- * }
+ * };
  */
 export interface ServiceAccountCredential {
     /**
@@ -164,10 +169,11 @@ export declare enum AuthCredentialTypes {
     SERVICE_ACCOUNT = "serviceAccount"
 }
 /**
- * Data class representing an authentication credential.
+ * An authentication credential, in one of several shapes selected by
+ * `authType`.
  *
- * To exchange for the actual credential, please use
- * CredentialExchanger.exchangeCredential().
+ * To turn one of these into the credential a request actually carries, use the
+ * `exchange()` method of a {@link BaseCredentialExchanger}.
  *
  * @example
  * // API Key Auth
@@ -211,7 +217,7 @@ export declare enum AuthCredentialTypes {
  *   }
  * }
  *
- * @example:
+ * @example
  * // Open ID Connect Auth
  * const authCredential: AuthCredential = {
  *   authType: AuthCredentialTypes.OPEN_ID_CONNECT,
@@ -219,11 +225,10 @@ export declare enum AuthCredentialTypes {
  *     clientId: "1234",
  *     clientSecret: "secret",
  *     redirectUri: "https://example.com",
- *     scopes: ["scope1", "scope2"],
  *   }
  * }
  *
- * @example:
+ * @example
  * // Auth with resource reference
  * const authCredential: AuthCredential = {
  *   authType: AuthCredentialTypes.API_KEY,
@@ -242,3 +247,12 @@ export interface AuthCredential {
     serviceAccount?: ServiceAccount;
     oauth2?: OAuth2Auth;
 }
+/**
+ * Reports whether `value` is an {@link AuthCredential}.
+ *
+ * Use it on a value that crossed a boundary where the type was lost, such as a
+ * credential read back out of session state. The check is a shallow one on
+ * `authType`, because the payload members are all optional and the type they
+ * carry depends on the scheme.
+ */
+export declare function isAuthCredential(value: unknown): value is AuthCredential;

package/dist/types/auth/auth_handler.d.ts

@@ -15,14 +15,25 @@ export declare class AuthHandler {
     private readonly authConfig;
     constructor(authConfig: AuthConfig);
     getAuthResponse(state: State): AuthCredential | undefined;
+    /**
+     * Stores the exchanged credential in the session state.
+     *
+     * @param state The session state to store the credential in.
+     * @throws Error: If the auth config has no credentialKey.
+     */
     parseAndStoreAuthResponse(state: State): Promise<void>;
     generateAuthRequest(): AuthConfig;
     /**
      * Generates an response containing the auth uri for user to sign in.
      *
+     * When the credential requests PKCE, the URI also carries the S256 code
+     * challenge derived from the credential's code verifier, and the returned
+     * credential carries the verifier the later token exchange must send.
+     *
      * @return An AuthCredential object containing the auth URI and state.
      * @throws Error: If the authorization endpoint is not configured in the
-     *     auth scheme.
+     *     auth scheme, or the credential requests a code challenge method other
+     *     than 'S256'.
      */
     generateAuthUri(): AuthCredential | undefined;
 }

package/dist/types/auth/oauth2/oauth2_credential_refresher.d.ts

@@ -15,7 +15,7 @@ export declare class OAuth2CredentialRefresher implements BaseCredentialRefreshe
      *
      * @param authCredential The OAuth2 credential to check.
      * @param authScheme The OAuth2 authentication scheme (optional).
-     * @returns True if the credential needs to be refreshed, False otherwise.
+     * @returns True if the credential needs to be refreshed, false otherwise.
      */
     isRefreshNeeded(authCredential: AuthCredential): Promise<boolean>;
     /**

package/dist/types/auth/oauth2/oauth2_utils.d.ts

@@ -5,6 +5,15 @@
  */
 import { OAuth2Auth } from '../auth_credential.js';
 import { AuthScheme } from '../auth_schemes.js';
+/**
+ * Generates a cryptographically secure PKCE code verifier (RFC 7636).
+ */
+export declare function generateCodeVerifier(): string;
+/**
+ * Derives the S256 PKCE code challenge for a code verifier (RFC 7636): the
+ * unpadded base64url encoding of the verifier's SHA-256 digest.
+ */
+export declare function createS256CodeChallenge(codeVerifier: string): string;
 /**
  * Returns the token endpoint for the given auth scheme.
  */

package/dist/types/auth/refresher/base_credential_refresher.d.ts

@@ -23,7 +23,7 @@ export interface BaseCredentialRefresher {
      *
      * @param authCredential The credential to check.
      * @param authScheme The authentication scheme (optional).
-     * @returns True if the credential needs to be refreshed, False otherwise.
+     * @returns True if the credential needs to be refreshed, false otherwise.
      */
     isRefreshNeeded(authCredential: AuthCredential, authScheme?: AuthScheme): Promise<boolean>;
     /**

package/dist/types/code_executors/code_execution_utils.d.ts

@@ -97,7 +97,7 @@ export declare function getEncodedFileContent(data: string): string;
  * @param content The mutable content to extract the code from.
  * @param codeBlockDelimiters The list of the enclosing delimiters to identify
  *     the code blocks.
- * @return The first code block if found, otherwise None.
+ * @return The first code block if found, otherwise an empty string.
  */
 export declare function extractCodeAndTruncateContent(content: Content, codeBlockDelimiters: Array<[string, string]>): string;
 /**

package/dist/types/code_executors/container_code_executor.d.ts

@@ -0,0 +1,89 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type Docker from 'dockerode';
+import { BaseCodeExecutor, ExecuteCodeParams } from './base_code_executor.js';
+import { CodeExecutionResult } from './code_execution_utils.js';
+/**
+ * Options for {@link ContainerCodeExecutor}.
+ */
+export interface ContainerCodeExecutorOptions {
+    /** Optional base url of a user-hosted Docker daemon (e.g. `tcp://host:2375`). */
+    baseUrl?: string;
+    /**
+     * Tag of the predefined or custom image to run on the container. Either
+     * `image` or `dockerPath` must be set. Defaults to `adk-code-executor:latest`
+     * when only `dockerPath` is given.
+     */
+    image?: string;
+    /**
+     * Path to a directory containing a Dockerfile. If set, the image is built
+     * from it instead of using a prebuilt tag. Either `image` or `dockerPath`
+     * must be set.
+     */
+    dockerPath?: string;
+    /**
+     * Start the container with networking enabled. Defaults to false so
+     * untrusted, model-generated code cannot reach the network (the cloud
+     * metadata endpoint, internal services, or exfiltration destinations).
+     */
+    networkEnabled?: boolean;
+    /**
+     * Wall-clock timeout in seconds for a single execution. Must be greater than
+     * 0; defaults to 300. Every execution shares one long-lived container, so an
+     * unbounded run (e.g. a loop emitted by the model) would burn that
+     * container's CPU for every later caller. Raise it rather than remove it for
+     * a computation that legitimately runs longer.
+     */
+    timeoutSeconds?: number;
+    /**
+     * Injected Docker client, primarily for testing so unit tests never touch a
+     * real Docker daemon. Defaults to a new client built from `baseUrl`.
+     */
+    docker?: Docker;
+}
+/**
+ * A code executor that runs model-generated code inside a hardened Docker
+ * container via the `dockerode` client.
+ *
+ * Security note: this executor runs model-generated code, which may be
+ * influenced by untrusted input (e.g. via prompt injection). By default the
+ * container is started with networking disabled and all Linux capabilities
+ * dropped so the executed code cannot reach the network (including the cloud
+ * metadata endpoint at `169.254.169.254`) or escalate privileges. Networking
+ * can be re-enabled via `networkEnabled: true` when the executed code is
+ * trusted.
+ *
+ * Limitations: this executor runs a code string only. `inputFiles` and `args`
+ * on the request are not copied into the container, and output files are not
+ * collected (`outputFiles` is always empty), so tools that stage resource
+ * files or read artifacts back (e.g. `RunSkillScriptTool`) are not yet
+ * supported. Sending files in and out via `putArchive`/`getArchive` is future
+ * work.
+ */
+export declare class ContainerCodeExecutor extends BaseCodeExecutor {
+    private readonly dockerPath?;
+    private readonly containerOptions;
+    private readonly timeoutSeconds;
+    private container?;
+    private initPromise?;
+    constructor(options?: ContainerCodeExecutorOptions);
+    executeCode(params: ExecuteCodeParams): Promise<CodeExecutionResult>;
+    /**
+     * Turns a non-zero exit into stderr the model can see. An empty stderr maps
+     * to `OUTCOME_OK` downstream, so a program that exits non-zero without
+     * writing stderr would otherwise look successful (matching
+     * `UnsafeLocalCodeExecutor`).
+     */
+    private describeExit;
+    /**
+     * Stops and removes the container. Safe to call when no container has been
+     * started; provided for deterministic teardown in tests and app shutdown.
+     */
+    close(): Promise<void>;
+    /** Lazily builds/starts the container exactly once. */
+    private ensureContainer;
+    private initContainer;
+}

package/dist/types/code_executors/docker_container.d.ts

@@ -0,0 +1,79 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type Docker from 'dockerode';
+/**
+ * Exit code reported when a run is killed for exceeding its deadline. Matches
+ * the convention of coreutils `timeout(1)`, which the executor uses to bound a
+ * run inside the container.
+ */
+export declare const TIMEOUT_EXIT_CODE = 124;
+/** Decoded output of a single command executed inside the container. */
+export interface ExecOutput {
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+}
+/** Options for {@link DockerContainer}. */
+export interface DockerContainerOptions {
+    /** Tag of the predefined or custom image to run on the container. */
+    image: string;
+    /**
+     * Start the container with networking enabled. When false, the container
+     * cannot reach the network, which is the safe default for untrusted code.
+     */
+    networkEnabled: boolean;
+    /** Optional base url of a user-hosted Docker daemon. */
+    baseUrl?: string;
+    /**
+     * Injected Docker client. When omitted, dockerode is loaded lazily and a
+     * client is built from `baseUrl`.
+     */
+    docker?: Docker;
+}
+/**
+ * The Docker container backing a code executor, wrapping the whole lifecycle
+ * (`build` -> `start` -> `execute` -> `stop`) and the Docker client resolution
+ * behind one small API, so callers only decide *what* to run, not *how* to
+ * drive Docker.
+ */
+export declare class DockerContainer {
+    private readonly options;
+    private client?;
+    private container?;
+    constructor(options: DockerContainerOptions);
+    /**
+     * Builds the image from a directory containing a Dockerfile. `src` is the raw
+     * directory listing; unlike the Docker CLI this does not honor
+     * `.dockerignore`.
+     */
+    build(dockerPath: string): Promise<void>;
+    /**
+     * Creates and starts the container, registering it for cleanup on process
+     * exit. Throws if already started: overwriting the handle would orphan the
+     * running container. Call {@link stop} first.
+     */
+    start(): Promise<void>;
+    /**
+     * Runs a command inside the container and returns its decoded output. The
+     * exec is created without a TTY so the stream stays multiplexed and can be
+     * split into stdout and stderr via `modem.demuxStream`.
+     *
+     * `timeoutSeconds` bounds the wait, not the in-container run: a process that
+     * keeps the exec's stdio open (e.g. a surviving background child) means
+     * `'end'` never fires, so without this cap the promise never settles (the
+     * same hang #793 fixed in the local executor). Callers that need to bound the
+     * run itself must wrap the command (see {@link ContainerCodeExecutor}). On a
+     * cap breach the result carries {@link TIMEOUT_EXIT_CODE}.
+     */
+    execute(cmd: string[], timeoutSeconds: number): Promise<ExecOutput>;
+    /** Stops and removes the container. Safe to call when never started. */
+    stop(): Promise<void>;
+    /**
+     * Resolves the Docker client once, lazily loading dockerode when no client
+     * was injected.
+     */
+    private getClient;
+}

package/dist/types/common.d.ts

@@ -8,7 +8,7 @@ export type { ActiveStreamingToolParams } from './agents/active_streaming_tool.j
 export { BaseAgent, isBaseAgent } from './agents/base_agent.js';
 export type { AfterAgentCallback, BaseAgentConfig, BeforeAgentCallback, SingleAgentCallback, } from './agents/base_agent.js';
 export { Context } from './agents/context.js';
-export { REQUEST_CONFIRMATION_FUNCTION_CALL_NAME, REQUEST_CREDENTIAL_FUNCTION_CALL_NAME, REQUEST_INPUT_FUNCTION_CALL_NAME, findEventByFunctionCallId, findMatchingFunctionCall, functionsExportedForTestingOnly, } from './agents/functions.js';
+export { REQUEST_CONFIRMATION_FUNCTION_CALL_NAME, REQUEST_CREDENTIAL_FUNCTION_CALL_NAME, REQUEST_INPUT_FUNCTION_CALL_NAME, findEventByFunctionCallId, findMatchingFunctionCall, functionsExportedForTestingOnly, isToolNotFound, } from './agents/functions.js';
 export { InvocationContext, requireAgent } from './agents/invocation_context.js';
 export type { InvocationContextParams, WorkflowInstructionScope, } from './agents/invocation_context.js';
 export { LiveRequestQueue } from './agents/live_request_queue.js';
@@ -36,8 +36,10 @@ export { createResumabilityConfig } from './apps/resumability_config.js';
 export type { ResumabilityConfig } from './apps/resumability_config.js';
 export type { BaseArtifactService, DeleteArtifactRequest, ListArtifactKeysRequest, ListVersionsRequest, LoadArtifactRequest, SaveArtifactRequest, } from './artifacts/base_artifact_service.js';
 export { InMemoryArtifactService } from './artifacts/in_memory_artifact_service.js';
+export { ScopedArtifactService } from './artifacts/scoped_artifact_service.js';
+export { isSessionArtifactService } from './artifacts/session_artifact_service.js';
 export type { SessionArtifactService, SessionLoadArtifactRequest, SessionSaveArtifactRequest, } from './artifacts/session_artifact_service.js';
-export { AuthCredentialTypes } from './auth/auth_credential.js';
+export { AuthCredentialTypes, isAuthCredential } from './auth/auth_credential.js';
 export type { AuthCredential, HttpAuth, HttpCredentials, OAuth2Auth, ServiceAccount, ServiceAccountCredential, } from './auth/auth_credential.js';
 export { AuthHandler } from './auth/auth_handler.js';
 export { AUTH_PREPROCESSOR, AuthPreprocessor } from './auth/auth_preprocessor.js';
@@ -74,6 +76,11 @@ export { TruncatingContextCompactor } from './context/truncating_context_compact
 export type { TruncatingContextCompactorOptions } from './context/truncating_context_compactor.js';
 export { BaseEnvironment } from './environment/base_environment.js';
 export type { ExecutionResult } from './environment/base_environment.js';
+export { AlreadyExistsError } from './errors/already_exists_error.js';
+export { InputValidationError } from './errors/input_validation_error.js';
+export { NotFoundError } from './errors/not_found_error.js';
+export { SessionNotFoundError } from './errors/session_not_found_error.js';
+export { ToolErrorType, ToolExecutionError, } from './errors/tool_execution_error.js';
 export { isCompactedEvent, isScratchpadEvent } from './events/compacted_event.js';
 export type { CompactedEvent } from './events/compacted_event.js';
 export { createEvent, generateClientFunctionCallId, getFunctionCalls, getFunctionResponses, hasThoughts, hasTrailingCodeExecutionResult, isFinalResponse, populateClientFunctionCallId, pruneThoughts, stringifyContent, } from './events/event.js';
@@ -83,16 +90,17 @@ export type { EventActions } from './events/event_actions.js';
 export { EventType, toStructuredEvents } from './events/structured_events.js';
 export type { ActivityEvent, CallCodeEvent, CodeResultEvent, ContentEvent, ErrorEvent, FinishedEvent, StructuredEvent, ThoughtEvent, ToolCallEvent, ToolConfirmationEvent, ToolResultEvent, } from './events/structured_events.js';
 export { BaseExampleProvider, isBaseExampleProvider, } from './examples/base_example_provider.js';
-export type { Example } from './examples/example.js';
+export { VertexAiExampleStore } from './examples/example.js';
+export type { Example, ExampleStoreApiClient, SearchExamplesRequest, SearchExamplesResponse, SearchExamplesResult, StoredContentsExample, } from './examples/example.js';
 export type { BaseMemoryService, SearchMemoryRequest, SearchMemoryResponse, } from './memory/base_memory_service.js';
 export { InMemoryMemoryService } from './memory/in_memory_memory_service.js';
 export type { MemoryEntry } from './memory/memory_entry.js';
-export { VertexAiMemoryBankService } from './memory/vertex_ai_memory_bank_service.js';
-export type { VertexAiMemoryBankServiceOptions } from './memory/vertex_ai_memory_bank_service.js';
 export { ApigeeLlm } from './models/apigee_llm.js';
 export type { ApigeeLlmParams } from './models/apigee_llm.js';
 export { BaseLlm, isBaseLlm } from './models/base_llm.js';
 export type { BaseLlmConnection } from './models/base_llm_connection.js';
+export { ChromeBuiltInLlm, ChromeModelUnavailableError, stripAdkIdentityPreamble, } from './models/chrome_prompt_llm.js';
+export type { ChromeBuiltInDiagnostic, ChromeBuiltInLlmParams, ChromeCreateCoreOptions, ChromeCreateMonitor, ChromeCreateOptions, ChromeExpectedModality, ChromeLanguageModelFactory, ChromeLanguageModelSession, ChromeMessage, ChromeMessageContent, ChromeModelAvailability, ChromePromptOptions, } from './models/chrome_prompt_llm.js';
 export { Gemini, geminiInitParams } from './models/google_llm.js';
 export type { GeminiParams } from './models/google_llm.js';
 export type { LlmRequest } from './models/llm_request.js';
@@ -101,10 +109,16 @@ export { LLMRegistry } from './models/registry.js';
 export type { BaseLlmType } from './models/registry.js';
 export { RoutedLlm } from './models/routed_llm.js';
 export type { LlmRouter } from './models/routed_llm.js';
+export { BasePlanner, isBasePlanner } from './planners/base_planner.js';
+export { BuiltInPlanner, isBuiltInPlanner } from './planners/built_in_planner.js';
+export { PlanReActPlanner } from './planners/plan_re_act_planner.js';
+export { GLOBAL_SCOPE_KEY, REFLECT_AND_RETRY_RESPONSE_TYPE, ScopedFailureTracker, TrackingScope, resolveScopeKey, type PerItemFailuresCounter, type ToolFailureResponse, } from './plugins/_reflect_retry_utils.js';
 export { BasePlugin, ContextCompactionTrigger } from './plugins/base_plugin.js';
 export { GlobalInstructionPlugin } from './plugins/global_instruction_plugin.js';
 export { LoggingPlugin } from './plugins/logging_plugin.js';
 export { PluginManager } from './plugins/plugin_manager.js';
+export { ADK_HANDLE_MODEL_ERROR_TOOL_NAME, RESERVED_TOOL_CALL_ERROR_TYPE, ReflectAndRetryModelPlugin, type ReflectAndRetryModelPluginOptions, } from './plugins/reflect_retry_model_plugin.js';
+export { ReflectAndRetryToolPlugin, type ReflectAndRetryToolPluginOptions, } from './plugins/reflect_retry_tool_plugin.js';
 export { InMemoryPolicyEngine, PolicyOutcome, SecurityPlugin, getAskUserConfirmationFunctionCalls, } from './plugins/security_plugin.js';
 export type { BasePolicyEngine, PolicyCheckResult, ToolCallPolicyContext, } from './plugins/security_plugin.js';
 export { InMemoryRunner } from './runner/in_memory_runner.js';
@@ -122,11 +136,13 @@ export { BaseTool, isBaseTool } from './tools/base_tool.js';
 export type { BaseToolParams, RunAsyncToolRequest, ToolProcessLlmRequest, } from './tools/base_tool.js';
 export { BaseToolset, isBaseToolset } from './tools/base_toolset.js';
 export type { ToolPredicate } from './tools/base_toolset.js';
+export { BuiltInTool } from './tools/built_in_tool.js';
 export { ConsolidateContextTool } from './tools/consolidate_context_tool.js';
 export { ENTERPRISE_WEB_SEARCH, EnterpriseWebSearchTool, } from './tools/enterprise_web_search_tool.js';
 export { ExampleTool } from './tools/example_tool.js';
 export { EXIT_LOOP, ExitLoopTool } from './tools/exit_loop_tool.js';
 export { FINISH_TASK_SUCCESS_RESULT, FINISH_TASK_TOOL_NAME, FinishTaskTool, } from './tools/finish_task_tool.js';
+export { ForwardingArtifactService } from './tools/forwarding_artifact_service.js';
 export { FunctionTool, isFunctionTool } from './tools/function_tool.js';
 export type { RequireConfirmation, ToolExecuteArgument, ToolExecuteFunction, ToolInputParameters, ToolOptions, } from './tools/function_tool.js';
 export { getUserChoiceTool } from './tools/get_user_choice_tool.js';
@@ -134,54 +150,52 @@ export { GOOGLE_MAPS_GROUNDING, GoogleMapsGroundingTool, } from './tools/google_
 export { GOOGLE_SEARCH, GoogleSearchTool } from './tools/google_search_tool.js';
 export { LOAD_ARTIFACTS, LoadArtifactsTool, } from './tools/load_artifacts_tool.js';
 export { LOAD_MEMORY, LoadMemoryTool } from './tools/load_memory_tool.js';
-export { LOAD_WEB_PAGE, loadWebPage } from './tools/load_web_page.js';
-export type { LoadWebPageOptions } from './tools/load_web_page.js';
 export { LongRunningFunctionTool } from './tools/long_running_tool.js';
 export { PRELOAD_MEMORY, PreloadMemoryTool, } from './tools/preload_memory_tool.js';
 export { requestInputTool } from './tools/request_input_tool.js';
+export type { ResumeInputs } from './tools/resume_inputs.js';
+export { BaseRetrievalTool } from './tools/retrieval/base_retrieval_tool.js';
+export { LlamaIndexRetrieval } from './tools/retrieval/llama_index_retrieval.js';
+export type { LlamaIndexNode, LlamaIndexNodeWithScore, LlamaIndexRetrievalParams, LlamaIndexRetriever, } from './tools/retrieval/llama_index_retrieval.js';
 export { IntentMismatchError, ToolConfirmation, isIntentMismatchError, } from './tools/tool_confirmation.js';
 export type { IntentMismatchReason } from './tools/tool_confirmation.js';
+export { CallbackContext, ToolContext } from './tools/tool_context.js';
 export { URL_CONTEXT, UrlContextTool } from './tools/url_context_tool.js';
 export { VertexAiSearchTool } from './tools/vertex_ai_search_tool.js';
 export type { DataStoreParams, SearchEngineParams, VertexAISearchConfig, VertexAISearchDataStoreSpec, VertexAiSearchToolParams, } from './tools/vertex_ai_search_tool.js';
 export { VertexRagRetrievalTool } from './tools/vertex_rag_retrieval_tool.js';
+export { WebMCPTool } from './tools/webmcp/webmcp_tool.js';
+export type { WebMCPToolParams } from './tools/webmcp/webmcp_tool.js';
+export { WebMCPToolset } from './tools/webmcp/webmcp_toolset.js';
+export type { WebMCPToolsetOptions } from './tools/webmcp/webmcp_toolset.js';
+export { getModelContext, isWebMCPSupported, } from './tools/webmcp/webmcp_types.js';
+export type { WebMCPDocument, WebMCPExecuteToolOptions, WebMCPGetToolsOptions, WebMCPModelContext, WebMCPRegisteredTool, WebMCPToolAnnotations, } from './tools/webmcp/webmcp_types.js';
 export { AsyncQueue } from './utils/async_queue.js';
+export { renameReservedKeywords, toSnakeCaseName } from './utils/case_utils.js';
 export { getClientLabels, runWithClientLabel } from './utils/client_labels.js';
-export { LogLevel, getLogger, setLogLevel, setLogger } from './utils/logger.js';
+export { LogLevel, getLogger, logger, resetLogger, setLogLevel, setLogger, } from './utils/logger.js';
 export type { Logger } from './utils/logger.js';
-export { isGemini2OrAbove, isGemini3xFlashLive } from './utils/model_name.js';
+export { isGemini2OrAbove, isGemini35LiveTranslate, isGemini3xFlashLive, isGemini3xLive, } from './utils/model_name.js';
 export type { SchemaLike } from './utils/schema.js';
 export { zodObjectToSchema } from './utils/simple_zod_to_json.js';
 export { Task } from './utils/task.js';
 export type { TaskExecutable } from './utils/task.js';
 export { GoogleLLMVariant } from './utils/variant_utils.js';
 export { version } from './version.js';
-export { GCPSkillRegistry } from './skills/gcp_skill_registry.js';
-export type { GCPSkillRegistryOptions } from './skills/gcp_skill_registry.js';
-export { loadAllSkillsInDir, loadSkillFromDir, loadSkillFromZipBuffer, validateSkillDir, } from './skills/loader.js';
 export type { Frontmatter, Resources, Script, Skill } from './skills/skill.js';
 export type { SkillRegistry } from './skills/skill_registry.js';
 export { ListSkillsTool } from './tools/skill/list_skills_tool.js';
-export { LoadSkillResourceTool } from './tools/skill/load_skill_resource_tool.js';
 export { LoadSkillTool } from './tools/skill/load_skill_tool.js';
 export { SearchSkillsTool } from './tools/skill/search_skills_tool.js';
-export { SkillToolset } from './tools/skill/skill_toolset.js';
 export * from './artifacts/base_artifact_service.js';
 export * from './features/feature_registry.js';
 export * from './memory/base_memory_service.js';
 export * from './sessions/base_session_service.js';
 export * from './tools/base_tool.js';
-export { OpenApiSpecParser } from './tools/openapi_tool/openapi_spec_parser/openapi_spec_parser.js';
-export type { OperationEndpoint, ParsedOperation, } from './tools/openapi_tool/openapi_spec_parser/openapi_spec_parser.js';
-export { OperationParser } from './tools/openapi_tool/openapi_spec_parser/operation_parser.js';
-export type { ApiParameter } from './tools/openapi_tool/openapi_spec_parser/operation_parser.js';
-export { ToolAuthHandler } from './tools/openapi_tool/openapi_spec_parser/tool_auth_handler.js';
-export type { AuthPreparationResult } from './tools/openapi_tool/openapi_spec_parser/tool_auth_handler.js';
-export { OpenAPIToolset } from './tools/openapi_tool/openapi_toolset.js';
-export { RestApiTool, createRestApiTool, } from './tools/openapi_tool/rest_api_tool.js';
 export { BaseNode, BranchPath, DEFAULT_ROUTE, Edge, FunctionNode, Graph, JoinNode, NodeContext, NodeReportedError, NodeSchemaValidationError, NodeStatus, NodeTimeoutError, NodeTool, ParallelWorker, RequestInput, START, ToolNode, Workflow, WorkflowNode, asRunnableRoot, commonPrefixOf, createNodeErrorEvent, createNodeState, createSubBranch, isNodeErrorEvent, isNodeReportedError, isNodeSchemaValidationError, isNodeState, isNodeTimeoutError, isRequestInput, isRunnableRoot, isWorkflow, node, normalizeRetryExceptions, prepareRetryConfig, } from './workflow/index.js';
 export type { BaseNodeConfig, BuildNodeOptions, ChainElement, CreateNodeErrorEventParams, DynamicEntry, EdgeItem, ErrorClass, FunctionNodeConfig, FunctionNodeHandler, FunctionNodeResult, NodeContextOptions, NodeErrorEvent, NodeLike, NodeOptions, NodeResult, NodeState, ParallelWorkerConfig, PreparedRetryConfig, RequestInputParams, RetryConfig, RouteValue, RoutingMap, RunNodeOptions, RunnableNode, RunnableRoot, ScheduleDynamicNode, ScheduleDynamicNodeOptions, ToolNodeConfig, WorkflowConfig, } from './workflow/index.js';
-export * from './apps/app.js';
+export { App, isApp, validateAppName } from './apps/app.js';
+export type { AppOptions } from './apps/app.js';
 export * from './artifacts/base_artifact_service.js';
 export * from './features/feature_registry.js';
 export * from './memory/base_memory_service.js';

package/dist/types/context/compaction_utils.d.ts

@@ -9,9 +9,17 @@ import { Event } from '../events/event.js';
  * If no compaction has occurred, returns all events.
  *
  * @param events The full history of events.
+ * @param currentIsolationScope The scope of the caller. Events tagged with a
+ *   different scope are withheld.
  * @returns The active events, starting with the latest CompactedEvent if present.
  */
-export declare function getActiveEvents(events: Event[]): Event[];
+export declare function getActiveEvents(events: Event[], currentIsolationScope?: string): Event[];
+/**
+ * Whether an event is visible to a caller's isolation scope.
+ * Untagged events are shared history; tagged events are visible only to their
+ * own scope. An unscoped caller therefore sees only shared history.
+ */
+export declare function isEventVisibleInIsolationScope(event: Event, currentIsolationScope?: string): boolean;
 /**
  * Determines the baseline index to retain from active raw events,
  * ensuring we don't split between a function call and its response.

package/dist/types/errors/already_exists_error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Represents an error that occurs when an entity already exists.
+ */
+export declare class AlreadyExistsError extends Error {
+    /**
+     * @param message An optional custom message to describe the error.
+     */
+    constructor(message?: string);
+}

package/dist/types/errors/input_validation_error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Represents an error raised when user input fails validation.
+ */
+export declare class InputValidationError extends Error {
+    /**
+     * @param message A message describing why the input is invalid.
+     */
+    constructor(message?: string);
+}

package/dist/types/errors/not_found_error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Represents an error that occurs when an entity is not found.
+ */
+export declare class NotFoundError extends Error {
+    /**
+     * @param message An optional custom message to describe the error.
+     */
+    constructor(message?: string);
+}

package/dist/types/errors/session_not_found_error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Raised when a session cannot be found.
+ */
+export declare class SessionNotFoundError extends Error {
+    /**
+     * @param message An optional custom message to describe the error.
+     */
+    constructor(message?: string);
+}

package/dist/types/errors/tool_execution_error.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * HTTP error types conforming to OpenTelemetry semantics.
+ *
+ * The string values populate the `error.type` span attribute, so they are
+ * observable outside the process and must stay identical to the adk-python
+ * `ToolErrorType` members.
+ */
+export declare enum ToolErrorType {
+    BAD_REQUEST = "BAD_REQUEST",
+    UNAUTHORIZED = "UNAUTHORIZED",
+    FORBIDDEN = "FORBIDDEN",
+    NOT_FOUND = "NOT_FOUND",
+    REQUEST_TIMEOUT = "REQUEST_TIMEOUT",
+    INTERNAL_SERVER_ERROR = "INTERNAL_SERVER_ERROR",
+    BAD_GATEWAY = "BAD_GATEWAY",
+    SERVICE_UNAVAILABLE = "SERVICE_UNAVAILABLE",
+    GATEWAY_TIMEOUT = "GATEWAY_TIMEOUT"
+}
+/**
+ * Represents an error that occurs during the execution of a tool.
+ */
+export declare class ToolExecutionError extends Error {
+    readonly errorType?: (ToolErrorType | string) | undefined;
+    /**
+     * @param message A message describing the error.
+     * @param errorType The semantic error type (e.g.
+     *   {@link ToolErrorType.REQUEST_TIMEOUT} or `'500'`). Used to populate the
+     *   `error.type` span attribute in OpenTelemetry traces.
+     */
+    constructor(message: string, errorType?: (ToolErrorType | string) | undefined);
+}

package/dist/types/events/event_actions.d.ts

@@ -79,6 +79,19 @@ export interface EventActions {
  * @returns A fully populated {@link EventActions} object.
  */
 export declare function createEventActions(state?: Partial<EventActions>): EventActions;
+/**
+ * Returns whether the given {@link EventActions} still holds only its default
+ * values, i.e. the event carries no state, artifact, auth, confirmation,
+ * transfer, escalation or summarization signal.
+ *
+ * An actions object is considered non-default when any dictionary field has at
+ * least one entry, or when any scalar field has been explicitly set (including
+ * being set to `false`).
+ *
+ * @param actions - The actions to inspect.
+ * @returns `true` when every field is at its default value.
+ */
+export declare function isDefaultEventActions(actions: EventActions): boolean;
 /**
  * Merges a list of {@link EventActions} objects into a single
  * {@link EventActions} object.

package/dist/types/examples/base_example_provider.d.ts

@@ -29,8 +29,8 @@ export declare abstract class BaseExampleProvider {
      * Returns a list of examples for a given query.
      *
      * @param query The query to get examples for.
-     * @return A list of Example objects.
+     * @return A promise that resolves to a list of Example objects.
      */
-    abstract getExamples(query: string): Example[];
+    abstract getExamples(query: string): Promise<Example[]>;
 }
 export {};