Agent Development Kit (ADK) Files

2.14.0 (2026-11-04)

Highlights

This release graduates execution environments, A2A, evaluation, and core runtime modules from experimental, adds multi-run evaluation and semantic tool argument matching, adds Microsoft Teams and OpenAI Decisions integrations, and makes long multi-turn workflows faster.

• Execution environments and sandboxes:
• BaseEnvironment, LocalEnvironment, EnvironmentToolset, DaytonaEnvironment, and E2BEnvironment are now stable. (c54b253, 799fc94)
• BaseEnvironment.read_file_stream streams files in chunks across LocalEnvironment, E2BEnvironment, and DaytonaEnvironment so ReadFileTool reads line ranges without loading the whole file into memory. See the unit guide for more details. (fd8d8c1)
• AgentEngineEnvironment reads and writes large files in chunks and reports commands over 570 seconds as timed out before the service deadline. See the unit guide and sample for more details. (4c88040, 5843c58, b13fa19, d3a199d)
• ContainerCodeExecutor supports input and output files, and RunSkillScriptTool runs skill scripts from validated paths and arguments instead of a shell command string. (effd641, ff61524)
• Evaluation:
• MultiRunConfig (adk eval --num_runs) and --parallelism run each eval case multiple times concurrently and combine scores or pass rates across runs. See the eval config and agent evaluator guides for more details. (7f3517e, e9e8f61)
• AgentEvaluator accepts a BaseNode or App built at runtime, and --eval_storage_uri stores eval files outside a read-only agents_dir. (ce92e92, ff66b1f)
• ToolArgsMatcher compares tool call arguments in evaluations and EnvironmentSimulation using exact, case-insensitive, numeric-tolerance, or LLM-backed semantic checks. See the unit guide for more details. (ed76f94, 08c289b)
• A2A: The A2A integration is now stable, and adk generate_agent_card builds an A2A agent card from the CLI. See the unit guide for more details. (95d4a56, 875e2ae)
• Integrations:
• TeamsRunner connects an ADK agent to Microsoft Teams chats and channels. See the unit guide for more details. (c4376a6)
• OpenAIDecisionsClassifier classifies workflow and tool-gating questions with the OpenAI Decisions API. See the unit guide for more details. (aa98d18)
• MongoDbMemoryService adds vector search retrieval (retrieval_mode="vector" or "auto") and TTL expiration (memory_ttl_days). See the unit guide for more details. (1c84bb9)
• Stable APIs: 26 auth, environment, app, CLI and cache modules, 16 toolset and integration features, and the mature evaluation and user simulation classes graduate from experimental, so you can build on them without experimental warnings. (c54b253, 799fc94, 1112606)
• Workflow performance: Long multi-turn workflows run faster and use less memory; a 30-node workflow's 200-turn run is 23% faster with 9% lower peak memory. (532580c, 1f21370)

Breaking changes

• Enum tool arguments arrive as members: FunctionTool parameters annotated Enum, Optional[Enum], or list[Enum] now receive enum members instead of the raw strings the model sent (as FUNCTION_TOOL_ARG_VALIDATION already did). For a plain Enum, arg == "value", string-keyed dict lookups, match on strings, json.dumps, and string methods no longer work. A callable require_confirmation still receives the raw values (unless FUNCTION_TOOL_ARG_VALIDATION is on). For a (str, Enum), str() and, on Python 3.11+, f-strings now render Cls.MEMBER. Compare against members, use .value, or switch to StrEnum. Enum members a tool returns in its result are still sent to the model as their values. (82fe029, 58332a2)
• VertexAiSessionService.create_session accepts only session config options: extra keyword arguments are limited to display_name, ttl, expire_time, and labels (plus camelCase aliases). Other Sessions API config keys, such as http_options, session_state, sessionId, and wait_for_completion, now raise ValueError (HTTP 400 when sent as session options to adk api_server). Use state= and session_id= for state and IDs. (968cd86)
• RunSkillScriptTool no longer takes command in environment mode: with a SkillToolset environment, the model now passes args, short_options, and positional_args instead of a free-form shell command, scripts run from the skill directory instead of the environment working directory, and only .py, .sh, and .bash scripts are supported (others return UNSUPPORTED_SCRIPT_TYPE). Calls, eval sets, or prompts that pass command now return INVALID_ARGUMENTS. This closes a hole that let a prompt-injected model run arbitrary shell commands. (ff61524)

Behavior changes

• /run_live now closes the socket with code 1007 on a malformed frame and 1000 when the run ends, instead of leaving it hanging; reconnect for each new live run instead of reusing an idle socket. (3b227d6)
• OpenAPI tool query parameters now follow their declared style and explode. (1d81896)
• DatabaseSessionService creates new PostgreSQL JSON columns as json instead of jsonb; existing jsonb tables are not migrated and keep working (the PostgreSQL sample README shows how to convert them). Queries outside ADK that rely on jsonb-only operators or GIN indexes will not work on new tables. (d487c53)
• gen_ai.invoke_workflow.duration, gen_ai.client.operation.duration, and gen_ai.client.token.usage histograms now use the semconv bucket bounds. (ba45671)
• An agent with an output_schema, no tools of its own, and a transfer target now gets the set_model_response tool instead of JSON mode on models that cannot combine a response schema with function calling, which adds two events per response. (73b6790)
• Token-threshold compaction counts tool outputs since the last model call, so it fires earlier for an unchanged token_threshold. (a72a8ed)
• A nested workflow whose terminal wait_for_output node is re-triggered into a new waiting run no longer surfaces that node's earlier output. (cddc57f)
• New teams and fsspec extras, and the e2b floor is raised to 2.29.5. (c4376a6, 6bf806a, 75fb788)
• FirestoreSessionService stores event payloads as JSON strings and wraps nested lists in app and user state. Existing sessions keep loading and accept new events, but sessions this version writes to cannot be read by 2.13.0 or earlier after a rollback. (0894c03)
• The 16 toolset and integration features promoted to stable (Bigtable, Computer Use, Daytona and E2B environments, Environment Simulation, GCS, MCP agent server, Pub/Sub, Spanner, and others) are always available: ADK_DISABLE_<FEATURE>, override_feature_enabled(<FEATURE>, False), and --disable_features no longer block them, with no error or warning. (799fc94)