@ai-sdk/anthropic 3.0.125 → 3.0.127

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @ai-sdk/anthropic
 
+## 3.0.127
+
+### Patch Changes
+
+- d5c12b2: feat(provider/anthropic): add `safeguards` provider option and `safeguardResults` provider metadata (dangerous tool use classifier)
+
+## 3.0.126
+
+### Patch Changes
+
+- Updated dependencies [a9cea74]
+- Updated dependencies [a9cea74]
+- Updated dependencies [a9cea74]
+  - @ai-sdk/provider-utils@4.0.57
+
 ## 3.0.125
 
 ### Patch Changes

package/dist/index.d.mts

@@ -3,6 +3,19 @@ import { z } from 'zod/v4';
 import * as _ai_sdk_provider_utils from '@ai-sdk/provider-utils';
 import { FetchFunction } from '@ai-sdk/provider-utils';
 
+declare const anthropicSafeguardResultSchema: z.ZodObject<{
+    type: z.ZodString;
+    status: z.ZodObject<{
+        type: z.ZodString;
+        tool_uses: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodString;
+            outcome: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            explanation: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+type AnthropicSafeguardResult = z.infer<typeof anthropicSafeguardResultSchema>;
+
 /**
  * Represents a single iteration in the usage breakdown.
  *
@@ -58,6 +71,18 @@ interface AnthropicMessageMetadata {
         path: string;
         reason: string;
     }>;
+    /**
+     * Verdicts of the server-side safeguards requested with
+     * `providerOptions.anthropic.safeguards`, one entry per requested safeguard.
+     * For `dangerous_tool_use`, `status.type` is `'available'` when the
+     * classifier ran and `status.tool_uses` maps each tool call id to its
+     * verdict (`type: 'evaluated'` with an `outcome` of `'not_flagged'` or
+     * `'flagged'` plus an `explanation`, `'skipped'`, or `'unavailable'`).
+     *
+     * Kept in the API's wire shape (snake_case), since consumers such as Claude
+     * Code read the verdicts verbatim.
+     */
+    safeguardResults?: AnthropicSafeguardResult[];
     /**
      * Details about why the request stopped. Present only when the API returns
      * a `refusal` stop reason together with a `stop_details` object (a
@@ -220,9 +245,9 @@ type AnthropicSystemMessageProviderOptions = z.infer<typeof anthropicSystemMessa
 declare const anthropicLanguageModelOptions: z.ZodObject<{
     sendReasoning: z.ZodOptional<z.ZodBoolean>;
     structuredOutputMode: z.ZodOptional<z.ZodEnum<{
+        auto: "auto";
         outputFormat: "outputFormat";
         jsonTool: "jsonTool";
-        auto: "auto";
     }>>;
     thinking: z.ZodOptional<z.ZodUnion<readonly [z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"adaptive">;
@@ -310,6 +335,10 @@ declare const anthropicLanguageModelOptions: z.ZodObject<{
         }>>;
     }, z.core.$strip>>]>>;
     anthropicBeta: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    safeguards: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        type: z.ZodLiteral<"dangerous_tool_use">;
+        classifierContext: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>>;
     contextManagement: z.ZodOptional<z.ZodObject<{
         edits: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
             type: z.ZodLiteral<"clear_tool_uses_20250919">;

package/dist/index.d.ts

@@ -3,6 +3,19 @@ import { z } from 'zod/v4';
 import * as _ai_sdk_provider_utils from '@ai-sdk/provider-utils';
 import { FetchFunction } from '@ai-sdk/provider-utils';
 
+declare const anthropicSafeguardResultSchema: z.ZodObject<{
+    type: z.ZodString;
+    status: z.ZodObject<{
+        type: z.ZodString;
+        tool_uses: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodString;
+            outcome: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            explanation: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+type AnthropicSafeguardResult = z.infer<typeof anthropicSafeguardResultSchema>;
+
 /**
  * Represents a single iteration in the usage breakdown.
  *
@@ -58,6 +71,18 @@ interface AnthropicMessageMetadata {
         path: string;
         reason: string;
     }>;
+    /**
+     * Verdicts of the server-side safeguards requested with
+     * `providerOptions.anthropic.safeguards`, one entry per requested safeguard.
+     * For `dangerous_tool_use`, `status.type` is `'available'` when the
+     * classifier ran and `status.tool_uses` maps each tool call id to its
+     * verdict (`type: 'evaluated'` with an `outcome` of `'not_flagged'` or
+     * `'flagged'` plus an `explanation`, `'skipped'`, or `'unavailable'`).
+     *
+     * Kept in the API's wire shape (snake_case), since consumers such as Claude
+     * Code read the verdicts verbatim.
+     */
+    safeguardResults?: AnthropicSafeguardResult[];
     /**
      * Details about why the request stopped. Present only when the API returns
      * a `refusal` stop reason together with a `stop_details` object (a
@@ -220,9 +245,9 @@ type AnthropicSystemMessageProviderOptions = z.infer<typeof anthropicSystemMessa
 declare const anthropicLanguageModelOptions: z.ZodObject<{
     sendReasoning: z.ZodOptional<z.ZodBoolean>;
     structuredOutputMode: z.ZodOptional<z.ZodEnum<{
+        auto: "auto";
         outputFormat: "outputFormat";
         jsonTool: "jsonTool";
-        auto: "auto";
     }>>;
     thinking: z.ZodOptional<z.ZodUnion<readonly [z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"adaptive">;
@@ -310,6 +335,10 @@ declare const anthropicLanguageModelOptions: z.ZodObject<{
         }>>;
     }, z.core.$strip>>]>>;
     anthropicBeta: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    safeguards: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        type: z.ZodLiteral<"dangerous_tool_use">;
+        classifierContext: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>>;
     contextManagement: z.ZodOptional<z.ZodObject<{
         edits: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
             type: z.ZodLiteral<"clear_tool_uses_20250919">;

package/dist/index.js

@@ -32,7 +32,7 @@ var import_provider4 = require("@ai-sdk/provider");
 var import_provider_utils27 = require("@ai-sdk/provider-utils");
 
 // src/version.ts
-var VERSION = true ? "3.0.125" : "0.0.0-test";
+var VERSION = true ? "3.0.127" : "0.0.0-test";
 
 // src/anthropic-messages-language-model.ts
 var import_provider3 = require("@ai-sdk/provider");
@@ -66,6 +66,20 @@ var anthropicStopDetailsSchema = import_v42.z.object({
   explanation: import_v42.z.string().nullish(),
   recommended_model: import_v42.z.string().nullish()
 });
+var anthropicSafeguardResultSchema = import_v42.z.object({
+  type: import_v42.z.string(),
+  status: import_v42.z.object({
+    type: import_v42.z.string(),
+    tool_uses: import_v42.z.record(
+      import_v42.z.string(),
+      import_v42.z.object({
+        type: import_v42.z.string(),
+        outcome: import_v42.z.string().nullish(),
+        explanation: import_v42.z.string().nullish()
+      })
+    ).nullish()
+  })
+});
 var anthropicToolCallCallerSchema = import_v42.z.union([
   import_v42.z.object({
     type: import_v42.z.literal("code_execution_20250825"),
@@ -366,6 +380,7 @@ var anthropicMessagesResponseSchema = (0, import_provider_utils2.lazySchema)(
       stop_sequence: import_v42.z.string().nullish(),
       stop_details: anthropicStopDetailsSchema.nullish(),
       input_transformations: import_v42.z.array(anthropicInputTransformationSchema).nullish(),
+      safeguard_results: import_v42.z.array(anthropicSafeguardResultSchema).nullish(),
       usage: import_v42.z.looseObject({
         input_tokens: import_v42.z.number(),
         output_tokens: import_v42.z.number(),
@@ -775,6 +790,7 @@ var anthropicMessagesChunkSchema = (0, import_provider_utils2.lazySchema)(
           stop_reason: import_v42.z.string().nullish(),
           stop_sequence: import_v42.z.string().nullish(),
           stop_details: anthropicStopDetailsSchema.nullish(),
+          safeguard_results: import_v42.z.array(anthropicSafeguardResultSchema).nullish(),
           container: import_v42.z.object({
             expires_at: import_v42.z.string(),
             id: import_v42.z.string(),
@@ -1133,6 +1149,22 @@ var anthropicLanguageModelOptions = import_v43.z.object({
    * Allow a provider to receive the full `betas` set if it needs it.
    */
   anthropicBeta: import_v43.z.array(import_v43.z.string()).optional(),
+  /**
+   * Server-side safeguards to run as part of the request.
+   *
+   * `dangerous_tool_use` asks the API to classify every `tool_use` block in
+   * the response for dangerous actions (the check Claude Code's auto mode
+   * relies on). The per-call verdicts are returned in
+   * `providerMetadata.anthropic.safeguardResults`, keyed by tool call id.
+   * `classifierContext` is passed through to the API as `classifier_context`.
+   * The `dangerous-tool-use-2026-09-03` beta is added automatically.
+   */
+  safeguards: import_v43.z.array(
+    import_v43.z.object({
+      type: import_v43.z.literal("dangerous_tool_use"),
+      classifierContext: import_v43.z.record(import_v43.z.string(), import_v43.z.unknown()).optional()
+    })
+  ).optional(),
   contextManagement: import_v43.z.object({
     edits: import_v43.z.array(
       import_v43.z.discriminatedUnion("type", [
@@ -4033,6 +4065,14 @@ var AnthropicMessagesLanguageModel = class {
       // prompt:
       system: messagesPrompt.system,
       messages: messagesPrompt.messages,
+      ...(anthropicOptions == null ? void 0 : anthropicOptions.safeguards) && anthropicOptions.safeguards.length > 0 && {
+        safeguards: anthropicOptions.safeguards.map((safeguard) => ({
+          type: safeguard.type,
+          ...safeguard.classifierContext !== void 0 && {
+            classifier_context: safeguard.classifierContext
+          }
+        }))
+      },
       ...contextManagement && {
         context_management: {
           edits: contextManagement.edits.map((edit) => {
@@ -4145,6 +4185,9 @@ var AnthropicMessagesLanguageModel = class {
     if ((anthropicOptions == null ? void 0 : anthropicOptions.mcpServers) && anthropicOptions.mcpServers.length > 0) {
       betas.add("mcp-client-2025-04-04");
     }
+    if ((anthropicOptions == null ? void 0 : anthropicOptions.safeguards) && anthropicOptions.safeguards.length > 0) {
+      betas.add("dangerous-tool-use-2026-09-03");
+    }
     if (contextManagement) {
       betas.add("context-management-2025-06-27");
       if (contextManagement.edits.some((e) => e.type === "compact_20260112")) {
@@ -4768,6 +4811,7 @@ var AnthropicMessagesLanguageModel = class {
           stopSequence: (_b2 = response.stop_sequence) != null ? _b2 : null,
           ...stopDetails != null ? { stopDetails } : {},
           ...response.input_transformations != null ? { inputTransformations: response.input_transformations } : {},
+          ...response.safeguard_results != null ? { safeguardResults: response.safeguard_results } : {},
           iterations: response.usage.iterations ? response.usage.iterations.map(
             (iter) => ({
               type: iter.type,
@@ -4858,6 +4902,7 @@ var AnthropicMessagesLanguageModel = class {
     let stopSequence = null;
     let stopDetails = void 0;
     let inputTransformations;
+    let safeguardResults;
     let container = null;
     let isJsonResponseFromTool = false;
     let isMessageOpen = false;
@@ -5679,6 +5724,9 @@ var AnthropicMessagesLanguageModel = class {
               if (value.input_transformations != null) {
                 inputTransformations = value.input_transformations;
               }
+              if (value.delta.safeguard_results != null) {
+                safeguardResults = value.delta.safeguard_results;
+              }
               rawUsage = {
                 ...rawUsage,
                 ...value.usage
@@ -5694,6 +5742,7 @@ var AnthropicMessagesLanguageModel = class {
                 stopSequence,
                 ...stopDetails != null ? { stopDetails } : {},
                 ...inputTransformations != null ? { inputTransformations } : {},
+                ...safeguardResults != null ? { safeguardResults } : {},
                 iterations: usage.iterations ? usage.iterations.map(
                   (iter) => ({
                     type: iter.type,