@ai-sdk/anthropic 3.0.125 → 3.0.127

package/dist/internal/index.mjs

@@ -50,6 +50,20 @@ var anthropicStopDetailsSchema = z2.object({
   explanation: z2.string().nullish(),
   recommended_model: z2.string().nullish()
 });
+var anthropicSafeguardResultSchema = z2.object({
+  type: z2.string(),
+  status: z2.object({
+    type: z2.string(),
+    tool_uses: z2.record(
+      z2.string(),
+      z2.object({
+        type: z2.string(),
+        outcome: z2.string().nullish(),
+        explanation: z2.string().nullish()
+      })
+    ).nullish()
+  })
+});
 var anthropicToolCallCallerSchema = z2.union([
   z2.object({
     type: z2.literal("code_execution_20250825"),
@@ -350,6 +364,7 @@ var anthropicMessagesResponseSchema = lazySchema2(
       stop_sequence: z2.string().nullish(),
       stop_details: anthropicStopDetailsSchema.nullish(),
       input_transformations: z2.array(anthropicInputTransformationSchema).nullish(),
+      safeguard_results: z2.array(anthropicSafeguardResultSchema).nullish(),
       usage: z2.looseObject({
         input_tokens: z2.number(),
         output_tokens: z2.number(),
@@ -759,6 +774,7 @@ var anthropicMessagesChunkSchema = lazySchema2(
           stop_reason: z2.string().nullish(),
           stop_sequence: z2.string().nullish(),
           stop_details: anthropicStopDetailsSchema.nullish(),
+          safeguard_results: z2.array(anthropicSafeguardResultSchema).nullish(),
           container: z2.object({
             expires_at: z2.string(),
             id: z2.string(),
@@ -1117,6 +1133,22 @@ var anthropicLanguageModelOptions = z3.object({
    * Allow a provider to receive the full `betas` set if it needs it.
    */
   anthropicBeta: z3.array(z3.string()).optional(),
+  /**
+   * Server-side safeguards to run as part of the request.
+   *
+   * `dangerous_tool_use` asks the API to classify every `tool_use` block in
+   * the response for dangerous actions (the check Claude Code's auto mode
+   * relies on). The per-call verdicts are returned in
+   * `providerMetadata.anthropic.safeguardResults`, keyed by tool call id.
+   * `classifierContext` is passed through to the API as `classifier_context`.
+   * The `dangerous-tool-use-2026-09-03` beta is added automatically.
+   */
+  safeguards: z3.array(
+    z3.object({
+      type: z3.literal("dangerous_tool_use"),
+      classifierContext: z3.record(z3.string(), z3.unknown()).optional()
+    })
+  ).optional(),
   contextManagement: z3.object({
     edits: z3.array(
       z3.discriminatedUnion("type", [
@@ -4073,6 +4105,14 @@ var AnthropicMessagesLanguageModel = class {
       // prompt:
       system: messagesPrompt.system,
       messages: messagesPrompt.messages,
+      ...(anthropicOptions == null ? void 0 : anthropicOptions.safeguards) && anthropicOptions.safeguards.length > 0 && {
+        safeguards: anthropicOptions.safeguards.map((safeguard) => ({
+          type: safeguard.type,
+          ...safeguard.classifierContext !== void 0 && {
+            classifier_context: safeguard.classifierContext
+          }
+        }))
+      },
       ...contextManagement && {
         context_management: {
           edits: contextManagement.edits.map((edit) => {
@@ -4185,6 +4225,9 @@ var AnthropicMessagesLanguageModel = class {
     if ((anthropicOptions == null ? void 0 : anthropicOptions.mcpServers) && anthropicOptions.mcpServers.length > 0) {
       betas.add("mcp-client-2025-04-04");
     }
+    if ((anthropicOptions == null ? void 0 : anthropicOptions.safeguards) && anthropicOptions.safeguards.length > 0) {
+      betas.add("dangerous-tool-use-2026-09-03");
+    }
     if (contextManagement) {
       betas.add("context-management-2025-06-27");
       if (contextManagement.edits.some((e) => e.type === "compact_20260112")) {
@@ -4808,6 +4851,7 @@ var AnthropicMessagesLanguageModel = class {
           stopSequence: (_b2 = response.stop_sequence) != null ? _b2 : null,
           ...stopDetails != null ? { stopDetails } : {},
           ...response.input_transformations != null ? { inputTransformations: response.input_transformations } : {},
+          ...response.safeguard_results != null ? { safeguardResults: response.safeguard_results } : {},
           iterations: response.usage.iterations ? response.usage.iterations.map(
             (iter) => ({
               type: iter.type,
@@ -4898,6 +4942,7 @@ var AnthropicMessagesLanguageModel = class {
     let stopSequence = null;
     let stopDetails = void 0;
     let inputTransformations;
+    let safeguardResults;
     let container = null;
     let isJsonResponseFromTool = false;
     let isMessageOpen = false;
@@ -5719,6 +5764,9 @@ var AnthropicMessagesLanguageModel = class {
               if (value.input_transformations != null) {
                 inputTransformations = value.input_transformations;
               }
+              if (value.delta.safeguard_results != null) {
+                safeguardResults = value.delta.safeguard_results;
+              }
               rawUsage = {
                 ...rawUsage,
                 ...value.usage
@@ -5734,6 +5782,7 @@ var AnthropicMessagesLanguageModel = class {
                 stopSequence,
                 ...stopDetails != null ? { stopDetails } : {},
                 ...inputTransformations != null ? { inputTransformations } : {},
+                ...safeguardResults != null ? { safeguardResults } : {},
                 iterations: usage.iterations ? usage.iterations.map(
                   (iter) => ({
                     type: iter.type,