@ai-sdk/gateway 3.0.87 → 3.0.88

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @ai-sdk/gateway
 
+## 3.0.88
+
+### Patch Changes
+
+- 5f439a1: feat (provider/gateway): add hipaaCompliant gateway provider option
+
 ## 3.0.87
 
 ### Patch Changes

package/dist/index.d.mts

@@ -550,6 +550,7 @@ declare const gatewayProviderOptions: _ai_sdk_provider_utils.LazySchema<{
     byok?: Record<string, Record<string, unknown>[]> | undefined;
     zeroDataRetention?: boolean | undefined;
     disallowPromptTraining?: boolean | undefined;
+    hipaaCompliant?: boolean | undefined;
     providerTimeouts?: {
         byok?: Record<string, number> | undefined;
     } | undefined;

package/dist/index.d.ts

@@ -550,6 +550,7 @@ declare const gatewayProviderOptions: _ai_sdk_provider_utils.LazySchema<{
     byok?: Record<string, Record<string, unknown>[]> | undefined;
     zeroDataRetention?: boolean | undefined;
     disallowPromptTraining?: boolean | undefined;
+    hipaaCompliant?: boolean | undefined;
     providerTimeouts?: {
         byok?: Record<string, number> | undefined;
     } | undefined;

package/dist/index.js

@@ -1525,7 +1525,7 @@ async function getVercelRequestId() {
 var import_provider_utils14 = require("@ai-sdk/provider-utils");
 
 // src/version.ts
-var VERSION = true ? "3.0.87" : "0.0.0-test";
+var VERSION = true ? "3.0.88" : "0.0.0-test";
 
 // src/gateway-provider.ts
 var AI_GATEWAY_PROTOCOL_VERSION = "0.0.1";

package/dist/index.mjs

@@ -1559,7 +1559,7 @@ async function getVercelRequestId() {
 import { withUserAgentSuffix } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "3.0.87" : "0.0.0-test";
+var VERSION = true ? "3.0.88" : "0.0.0-test";
 
 // src/gateway-provider.ts
 var AI_GATEWAY_PROTOCOL_VERSION = "0.0.1";

package/docs/00-ai-gateway.mdx

@@ -786,6 +786,9 @@ The following gateway provider options are available:
 
   Restricts routing requests to providers that have agreements with Vercel for AI Gateway to not use prompts for model training. If there are no providers available for the model that disallow prompt training, the request will fail. BYOK credentials are skipped when `disallowPromptTraining` is set to `true` to ensure that requests are only routed to providers that do not train on prompt data.
 
+- **hipaaCompliant** _boolean_
+
+  Restricts routing to models and tools from providers that have signed a BAA with Vercel for the use of AI Gateway (requires Vercel HIPAA BAA add on). BYOK credentials are skipped when `hipaaCompliant` is set to `true` to ensure that requests are only routed to providers that support HIPAA compliance.
 
 - **providerTimeouts** _object_
 
@@ -876,6 +879,25 @@ const { text } = await generateText({
 });
 ```
 
+#### HIPAA Compliance Example
+
+Set `hipaaCompliant` to true to route requests only to models or tools by providers that have signed a BAA with Vercel for the use of AI Gateway. If the model or tool does not have a HIPAA-compliant provider, the request will fail. When `hipaaCompliant` is `false` or not specified, there is no enforcement of restricting routing. BYOK credentials are skipped when `hipaaCompliant` is set to `true` to ensure that requests are only routed to providers that support HIPAA compliance.
+
+```ts
+import type { GatewayProviderOptions } from '@ai-sdk/gateway';
+import { generateText } from 'ai';
+
+const { text } = await generateText({
+  model: 'anthropic/claude-sonnet-4.6',
+  prompt: 'Analyze this patient data...',
+  providerOptions: {
+    gateway: {
+      hipaaCompliant: true,
+    } satisfies GatewayProviderOptions,
+  },
+});
+```
+
 ### Provider-Specific Options
 
 When using provider-specific options through AI Gateway, use the actual provider name (e.g. `anthropic`, `openai`, not `gateway`) as the key:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ai-sdk/gateway",
   "private": false,
-  "version": "3.0.87",
+  "version": "3.0.88",
   "license": "Apache-2.0",
   "sideEffects": false,
   "main": "./dist/index.js",

package/src/gateway-provider-options.ts

@@ -65,6 +65,12 @@ const gatewayProviderOptions = lazySchema(() =>
        * to not use prompts for model training will be used.
        */
       disallowPromptTraining: z.boolean().optional(),
+      /**
+       * Whether to filter by only providers that are HIPAA compliant with
+       * Vercel AI Gateway. When enabled, only providers that have agreements
+       * with Vercel AI Gateway for HIPAA compliance will be used.
+       */
+      hipaaCompliant: z.boolean().optional(),
       /**
        * Per-provider timeouts for BYOK credentials in milliseconds.
        * Controls how long to wait for a provider to start responding