@ai-sdk/workflow 2.0.15 → 2.0.16

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @ai-sdk/workflow
 
+## 2.0.16
+
+### Patch Changes
+
+- 11109ae: feat(ai): support signed tool approvals in WorkflowAgent
+- Updated dependencies [11109ae]
+  - ai@7.0.86
+
 ## 2.0.15
 
 ### Patch Changes

package/dist/index.d.ts

@@ -4,6 +4,11 @@ import { ToolSet, Experimental_LanguageModelStreamPart, LanguageModel, Instructi
 export { Output, ToolCallRepairFunction } from 'ai';
 
 type ModelCallStreamPart<TTools extends ToolSet = ToolSet> = Experimental_LanguageModelStreamPart<TTools> | {
+    type: 'tool-approval-request';
+    approvalId: string;
+    toolCallId: string;
+    signature?: string;
+} | {
     type: 'reset-step';
 };
 
@@ -64,6 +69,16 @@ interface OutputSpecification<OUTPUT, PARTIAL> {
  * Provider-specific options type. This is equivalent to SharedV4ProviderOptions from @ai-sdk/provider.
  */
 type ProviderOptions = SharedV4ProviderOptions;
+/**
+ * Workflow-safe reference to the environment variable that contains the
+ * secret used to sign and verify tool approvals.
+ */
+type WorkflowToolApprovalSecret = {
+    /**
+     * Name of an environment variable containing a high-entropy secret.
+     */
+    environmentVariable: string;
+};
 type WorkflowAgentToolsContextParameter<TTools extends ToolSet> = HasRequiredKey<InferToolSetContext<TTools>> extends true ? {
     toolsContext: InferToolSetContext<TTools>;
 } : {
@@ -396,6 +411,17 @@ type WorkflowAgentOptions<TTools extends ToolSet = ToolSet, TRuntimeContext exte
      * Per-stream `experimental_sandbox` values passed to `stream()` override this default.
      */
     experimental_sandbox?: Experimental_SandboxSession;
+    /**
+     * Workflow-safe reference to the environment variable containing the
+     * secret for HMAC-signing tool approval requests. When set, the agent signs
+     * each approval request and verifies the signature before executing an
+     * approved tool replayed from client-supplied message history.
+     *
+     * Only the environment variable name crosses workflow boundaries. The
+     * secret value is read inside signing and verification steps and is never
+     * serialized. Per-stream values override this default.
+     */
+    experimental_toolApprovalSecret?: WorkflowToolApprovalSecret;
     /**
      * Default callback function called before each step in the agent loop.
      * Use this to modify settings, manage context, or inject messages dynamically
@@ -762,6 +788,17 @@ type WorkflowAgentStreamOptions<TTools extends ToolSet = ToolSet, TRuntimeContex
      * `experimental_sandbox`. Overrides the constructor-level value if provided.
      */
     experimental_sandbox?: Experimental_SandboxSession;
+    /**
+     * Workflow-safe reference to the environment variable containing the
+     * secret for HMAC-signing tool approval requests. When set, the agent signs
+     * each approval request and verifies the signature before executing an
+     * approved tool replayed from client-supplied message history.
+     *
+     * Only the environment variable name crosses workflow boundaries. The
+     * secret value is read inside signing and verification steps and is never
+     * serialized. Overrides the constructor-level value if provided.
+     */
+    experimental_toolApprovalSecret?: WorkflowToolApprovalSecret;
     /**
      * Callback function to be called after each step completes.
      */
@@ -981,6 +1018,7 @@ declare class WorkflowAgent<TBaseTools extends ToolSet = ToolSet, TRuntimeContex
     private repairToolCall?;
     private experimentalDownload?;
     private experimentalSandbox?;
+    private experimentalToolApprovalSecret?;
     private prepareStep?;
     private allowSystemInMessages;
     private constructorOnStepEnd?;
@@ -1227,4 +1265,4 @@ declare class WorkflowChatTransport<UI_MESSAGE extends UIMessage> implements Cha
  */
 declare function normalizeUIMessageStreamParts(source: AsyncIterable<UIMessageChunk>): AsyncGenerator<UIMessageChunk>;
 
-export { type CompatibleLanguageModel, type DownloadFunction, type GenerationSettings, type InferWorkflowAgentTools, type InferWorkflowAgentUIMessage, type ModelCallStreamPart, type OutputSpecification, type PrepareCallCallback, type PrepareCallOptions, type PrepareCallResult, type PrepareStepCallback, type PrepareStepInfo, type PrepareStepResult, type ProviderOptions, type ReconnectToStreamOptions, type SendMessagesOptions, type StreamTextTransform, type TelemetryOptions, WorkflowAgent, type WorkflowAgentOnAbortCallback, type WorkflowAgentOnEndCallback, type WorkflowAgentOnErrorCallback, type WorkflowAgentOnFinishCallback, type WorkflowAgentOnStartCallback, type WorkflowAgentOnStepEndCallback, type WorkflowAgentOnStepFinishCallback, type WorkflowAgentOnStepStartCallback, type WorkflowAgentOnToolExecutionEndCallback, type WorkflowAgentOnToolExecutionStartCallback, type WorkflowAgentOptions, type WorkflowAgentStreamOptions, type WorkflowAgentStreamResult, WorkflowChatTransport, type WorkflowChatTransportOptions, createModelCallToUIChunkTransform, normalizeUIMessageStreamParts, toUIMessageChunk };
+export { type CompatibleLanguageModel, type DownloadFunction, type GenerationSettings, type InferWorkflowAgentTools, type InferWorkflowAgentUIMessage, type ModelCallStreamPart, type OutputSpecification, type PrepareCallCallback, type PrepareCallOptions, type PrepareCallResult, type PrepareStepCallback, type PrepareStepInfo, type PrepareStepResult, type ProviderOptions, type ReconnectToStreamOptions, type SendMessagesOptions, type StreamTextTransform, type TelemetryOptions, WorkflowAgent, type WorkflowAgentOnAbortCallback, type WorkflowAgentOnEndCallback, type WorkflowAgentOnErrorCallback, type WorkflowAgentOnFinishCallback, type WorkflowAgentOnStartCallback, type WorkflowAgentOnStepEndCallback, type WorkflowAgentOnStepFinishCallback, type WorkflowAgentOnStepStartCallback, type WorkflowAgentOnToolExecutionEndCallback, type WorkflowAgentOnToolExecutionStartCallback, type WorkflowAgentOptions, type WorkflowAgentStreamOptions, type WorkflowAgentStreamResult, WorkflowChatTransport, type WorkflowChatTransportOptions, type WorkflowToolApprovalSecret, createModelCallToUIChunkTransform, normalizeUIMessageStreamParts, toUIMessageChunk };

package/dist/index.js

@@ -9,15 +9,18 @@ import {
 } from "@ai-sdk/provider-utils";
 import {
   Output,
-  experimental_filterActiveTools as filterActiveTools2
+  experimental_filterActiveTools as filterActiveTools2,
+  InvalidToolApprovalSignatureError
 } from "ai";
 import {
   createRestrictedTelemetryDispatcher as createRestrictedTelemetryDispatcher2,
   collectToolApprovals,
   convertToLanguageModelPrompt,
   mergeCallbacks,
+  signToolApproval,
   standardizePrompt,
-  validateApprovedToolApprovals
+  validateApprovedToolApprovals,
+  verifyToolApprovalSignature
 } from "ai/internal";
 
 // src/create-language-model-tool-result-output.ts
@@ -314,7 +317,16 @@ async function doStreamStep(conversationPrompt, modelInit, writable, serializedT
           break;
       }
       if (writer) {
-        await writer.write(part);
+        if (part.type === "tool-approval-request") {
+          await writer.write({
+            type: "tool-approval-request",
+            approvalId: part.approvalId,
+            toolCallId: part.toolCall.toolCallId,
+            ...part.signature != null ? { signature: part.signature } : {}
+          });
+        } else {
+          await writer.write(part);
+        }
       }
       if (part.type === "error" && !hasTerminalError) {
         terminalError = part.error;
@@ -806,6 +818,7 @@ var WorkflowAgent = class {
     this.repairToolCall = (_c = options.repairToolCall) != null ? _c : options.experimental_repairToolCall;
     this.experimentalDownload = options.experimental_download;
     this.experimentalSandbox = options.experimental_sandbox;
+    this.experimentalToolApprovalSecret = options.experimental_toolApprovalSecret;
     this.prepareStep = options.prepareStep;
     this.constructorOnStepEnd = (_d = options.onStepEnd) != null ? _d : options.onStepFinish;
     const { onFinish, onEnd = onFinish } = options;
@@ -836,7 +849,7 @@ var WorkflowAgent = class {
     throw new Error("Not implemented");
   }
   async stream(options) {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _A, _B, _C, _D, _E, _F, _G, _H, _I, _J, _K, _L, _M, _N, _O, _P, _Q, _R, _S, _T, _U;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _A, _B, _C, _D, _E, _F, _G, _H, _I, _J, _K, _L, _M, _N, _O, _P, _Q, _R, _S, _T, _U, _V;
     const { onFinish, onEnd = onFinish } = options;
     let effectiveModel = this.model;
     let effectiveInstructions = (_b = (_a = options.instructions) != null ? _a : options.system) != null ? _b : this.instructions;
@@ -849,8 +862,9 @@ var WorkflowAgent = class {
     let effectiveStopWhenFromPrepare = (_h = options.stopWhen) != null ? _h : this.stopWhen;
     let effectiveActiveToolsFromPrepare = (_i = options.activeTools) != null ? _i : this.activeTools;
     let effectiveDownloadFromPrepare = (_j = options.experimental_download) != null ? _j : this.experimentalDownload;
-    let effectiveTelemetryFromPrepare = (_k = options.telemetry) != null ? _k : this.telemetry;
-    const resolvedMessagesForPrepareCall = (_l = effectiveMessages != null ? effectiveMessages : typeof effectivePrompt === "string" ? [{ role: "user", content: effectivePrompt }] : effectivePrompt) != null ? _l : [];
+    const effectiveToolApprovalSecret = (_k = options.experimental_toolApprovalSecret) != null ? _k : this.experimentalToolApprovalSecret;
+    let effectiveTelemetryFromPrepare = (_l = options.telemetry) != null ? _l : this.telemetry;
+    const resolvedMessagesForPrepareCall = (_m = effectiveMessages != null ? effectiveMessages : typeof effectivePrompt === "string" ? [{ role: "user", content: effectivePrompt }] : effectivePrompt) != null ? _m : [];
     if (this.prepareCall) {
       const prepared = await this.prepareCall({
         model: effectiveModel,
@@ -926,7 +940,7 @@ var WorkflowAgent = class {
       ...effectivePrompt != null ? { prompt: effectivePrompt } : { messages: effectiveMessages }
     });
     const download = effectiveDownloadFromPrepare;
-    const sandbox = (_m = options.experimental_sandbox) != null ? _m : this.experimentalSandbox;
+    const sandbox = (_n = options.experimental_sandbox) != null ? _n : this.experimentalSandbox;
     const collectedApprovals = collectToolApprovals({
       messages: prompt.messages
     });
@@ -986,6 +1000,14 @@ var WorkflowAgent = class {
           }
           let revalidationReason;
           try {
+            await validateWorkflowToolApprovalSignature({
+              secret: effectiveToolApprovalSecret,
+              approvalId: approval.collected.approvalRequest.approvalId,
+              toolCallId: approval.toolCallId,
+              toolName: approval.toolName,
+              input: approval.input,
+              signature: approval.collected.approvalRequest.signature
+            });
             const { deniedToolApprovals: policyDenied, invalidToolApprovals } = await validateApprovedToolApprovals({
               approvedToolApprovals: [approval.collected],
               tools: this.tools,
@@ -999,7 +1021,7 @@ var WorkflowAgent = class {
                 invalidToolApprovals[0].error
               );
             } else if (policyDenied.length > 0) {
-              revalidationReason = (_n = policyDenied[0].approvalResponse.reason) != null ? _n : "Tool approval denied";
+              revalidationReason = (_o = policyDenied[0].approvalResponse.reason) != null ? _o : "Tool approval denied";
             }
           } catch (error) {
             revalidationReason = getErrorMessage(error);
@@ -1036,7 +1058,7 @@ var WorkflowAgent = class {
               input: approval.input
             };
             const messages2 = prompt.messages;
-            await ((_o = telemetryDispatcher.onToolExecutionStart) == null ? void 0 : _o.call(telemetryDispatcher, {
+            await ((_p = telemetryDispatcher.onToolExecutionStart) == null ? void 0 : _p.call(telemetryDispatcher, {
               toolCall: toolCallEvent,
               stepNumber: 0,
               messages: messages2,
@@ -1054,7 +1076,7 @@ var WorkflowAgent = class {
               toolCallId: approval.toolCallId,
               execute: executeApprovedTool
             }) : await executeApprovedTool();
-            await ((_p = telemetryDispatcher.onToolExecutionEnd) == null ? void 0 : _p.call(telemetryDispatcher, {
+            await ((_q = telemetryDispatcher.onToolExecutionEnd) == null ? void 0 : _q.call(telemetryDispatcher, {
               toolCall: toolCallEvent,
               stepNumber: 0,
               durationMs: Date.now() - startTime,
@@ -1086,7 +1108,7 @@ var WorkflowAgent = class {
             });
           } catch (error) {
             const errorMessage = getErrorMessage(error);
-            await ((_q = telemetryDispatcher.onToolExecutionEnd) == null ? void 0 : _q.call(telemetryDispatcher, {
+            await ((_r = telemetryDispatcher.onToolExecutionEnd) == null ? void 0 : _r.call(telemetryDispatcher, {
               toolCall: {
                 type: "tool-call",
                 toolCallId: approval.toolCallId,
@@ -1185,7 +1207,7 @@ var WorkflowAgent = class {
       supportedUrls: {},
       download
     });
-    const effectiveAbortSignal = (_r = options.abortSignal) != null ? _r : effectiveGenerationSettings.abortSignal;
+    const effectiveAbortSignal = (_s = options.abortSignal) != null ? _s : effectiveGenerationSettings.abortSignal;
     const timeoutAt = options.timeout == null ? void 0 : Date.now() + options.timeout;
     const mergedGenerationSettings = {
       ...effectiveGenerationSettings,
@@ -1220,12 +1242,12 @@ var WorkflowAgent = class {
       }
     };
     mergedGenerationSettings.headers = withUserAgentSuffix(
-      (_s = mergedGenerationSettings.headers) != null ? _s : {},
+      (_t = mergedGenerationSettings.headers) != null ? _t : {},
       "ai-sdk-agent/workflow"
     );
     const mergedOnStepEnd = mergeCallbacks(
       this.constructorOnStepEnd,
-      (_t = options.onStepEnd) != null ? _t : options.onStepFinish
+      (_u = options.onStepEnd) != null ? _u : options.onStepFinish
     );
     const mergedOnEnd = mergeCallbacks(
       this.constructorOnEnd,
@@ -1249,10 +1271,10 @@ var WorkflowAgent = class {
     );
     const effectiveToolChoice = effectiveToolChoiceFromPrepare;
     const effectiveActiveTools = effectiveActiveToolsFromPrepare;
-    const effectiveTools = effectiveActiveTools && effectiveActiveTools.length > 0 ? (_u = filterActiveTools2({
+    const effectiveTools = effectiveActiveTools && effectiveActiveTools.length > 0 ? (_v = filterActiveTools2({
       tools: this.tools,
       activeTools: effectiveActiveTools
-    })) != null ? _u : this.tools : this.tools;
+    })) != null ? _v : this.tools : this.tools;
     const effectiveModelInfo = getModelInfo2(effectiveModel);
     let runtimeContext = effectiveRuntimeContext;
     let toolsContext = effectiveToolsContext;
@@ -1267,7 +1289,7 @@ var WorkflowAgent = class {
         toolsContext
       });
     }
-    await ((_x = telemetryDispatcher.onStart) == null ? void 0 : _x.call(telemetryDispatcher, {
+    await ((_y = telemetryDispatcher.onStart) == null ? void 0 : _y.call(telemetryDispatcher, {
       callId: "workflow-agent",
       operationId: "ai.workflowAgent.stream",
       provider: effectiveModelInfo.provider,
@@ -1285,12 +1307,12 @@ var WorkflowAgent = class {
       frequencyPenalty: mergedGenerationSettings.frequencyPenalty,
       stopSequences: mergedGenerationSettings.stopSequences,
       seed: mergedGenerationSettings.seed,
-      maxRetries: (_v = mergedGenerationSettings.maxRetries) != null ? _v : 2,
+      maxRetries: (_w = mergedGenerationSettings.maxRetries) != null ? _w : 2,
       timeout: void 0,
       headers: mergedGenerationSettings.headers,
       reasoning: mergedGenerationSettings.reasoning,
       providerOptions: mergedGenerationSettings.providerOptions,
-      output: (_w = options.output) != null ? _w : this.output,
+      output: (_x = options.output) != null ? _x : this.output,
       runtimeContext,
       toolsContext
     }));
@@ -1440,7 +1462,7 @@ var WorkflowAgent = class {
         }
       }));
     };
-    if ((_y = mergedGenerationSettings.abortSignal) == null ? void 0 : _y.aborted) {
+    if ((_z = mergedGenerationSettings.abortSignal) == null ? void 0 : _z.aborted) {
       if (options.onAbort) {
         await options.onAbort({ steps });
       }
@@ -1464,16 +1486,16 @@ var WorkflowAgent = class {
       stopConditions: effectiveStopWhenFromPrepare,
       onStepEnd: mergedOnStepEnd,
       onStepStart: mergedOnStepStart,
-      prepareStep: (_z = options.prepareStep) != null ? _z : this.prepareStep,
+      prepareStep: (_A = options.prepareStep) != null ? _A : this.prepareStep,
       generationSettings: mergedGenerationSettings,
       toolChoice: effectiveToolChoice,
       runtimeContext,
       toolsContext,
       telemetry: effectiveTelemetry,
-      includeRawChunks: (_A = options.includeRawChunks) != null ? _A : false,
+      includeRawChunks: (_B = options.includeRawChunks) != null ? _B : false,
       timeoutAt,
-      repairToolCall: (_C = (_B = options.repairToolCall) != null ? _B : options.experimental_repairToolCall) != null ? _C : this.repairToolCall,
-      responseFormat: await ((_E = (_D = options.output) != null ? _D : this.output) == null ? void 0 : _E.responseFormat),
+      repairToolCall: (_D = (_C = options.repairToolCall) != null ? _C : options.experimental_repairToolCall) != null ? _D : this.repairToolCall,
+      responseFormat: await ((_F = (_E = options.output) != null ? _E : this.output) == null ? void 0 : _F.responseFormat),
       experimental_sandbox: sandbox
     });
     let finalMessages;
@@ -1485,7 +1507,7 @@ var WorkflowAgent = class {
     try {
       let result = await iterator.next();
       while (!result.done) {
-        if ((_F = mergedGenerationSettings.abortSignal) == null ? void 0 : _F.aborted) {
+        if ((_G = mergedGenerationSettings.abortSignal) == null ? void 0 : _G.aborted) {
           wasAborted = true;
           if (options.onAbort) {
             await options.onAbort({ steps });
@@ -1617,12 +1639,12 @@ var WorkflowAgent = class {
             const messages2 = iterMessages;
             const lastStep2 = steps[steps.length - 1];
             const totalUsage2 = aggregateUsage(steps);
-            const finishReason2 = (_G = lastStep2 == null ? void 0 : lastStep2.finishReason) != null ? _G : "other";
+            const finishReason2 = (_H = lastStep2 == null ? void 0 : lastStep2.finishReason) != null ? _H : "other";
             if (mergedOnEnd && !wasAborted) {
               await mergedOnEnd({
                 steps,
                 messages: messages2,
-                text: (_H = lastStep2 == null ? void 0 : lastStep2.text) != null ? _H : "",
+                text: (_I = lastStep2 == null ? void 0 : lastStep2.text) != null ? _I : "",
                 finishReason: finishReason2,
                 usage: totalUsage2,
                 totalUsage: totalUsage2,
@@ -1634,7 +1656,7 @@ var WorkflowAgent = class {
             if (!wasAborted && steps.length > 0) {
               const telemetrySteps = steps.map(normalizeStepForTelemetry2);
               const lastTelemetryStep = telemetrySteps[telemetrySteps.length - 1];
-              await ((_I = telemetryDispatcher.onEnd) == null ? void 0 : _I.call(telemetryDispatcher, {
+              await ((_J = telemetryDispatcher.onEnd) == null ? void 0 : _J.call(telemetryDispatcher, {
                 ...lastTelemetryStep,
                 steps: telemetrySteps,
                 usage: totalUsage2,
@@ -1652,18 +1674,29 @@ var WorkflowAgent = class {
                 return approvalNeeded[tcIndex];
               });
               if (approvalToolCalls.length > 0) {
-                await writeApprovalRequests(
-                  options.writable,
-                  approvalToolCalls.map((tc) => ({
-                    toolCallId: tc.toolCallId,
-                    toolName: tc.toolName
-                  }))
+                const approvalRequests = await Promise.all(
+                  approvalToolCalls.map(async (tc) => {
+                    const approvalId = `approval-${tc.toolCallId}`;
+                    const signature = effectiveToolApprovalSecret == null ? void 0 : await signWorkflowToolApproval({
+                      secret: effectiveToolApprovalSecret,
+                      approvalId,
+                      toolCallId: tc.toolCallId,
+                      toolName: tc.toolName,
+                      input: tc.input
+                    });
+                    return {
+                      approvalId,
+                      toolCallId: tc.toolCallId,
+                      ...signature != null ? { signature } : {}
+                    };
+                  })
                 );
+                await writeApprovalRequests(options.writable, approvalRequests);
               }
             }
             if (options.writable) {
-              const sendFinish = (_J = options.sendFinish) != null ? _J : true;
-              const preventClose = (_K = options.preventClose) != null ? _K : false;
+              const sendFinish = (_K = options.sendFinish) != null ? _K : true;
+              const preventClose = (_L = options.preventClose) != null ? _L : false;
               if (sendFinish || !preventClose) {
                 await closeStream(options.writable, preventClose, sendFinish);
               }
@@ -1803,16 +1836,16 @@ var WorkflowAgent = class {
       } else if (options.onError) {
         await options.onError({ error });
       }
-      await ((_L = telemetryDispatcher.onError) == null ? void 0 : _L.call(telemetryDispatcher, error));
+      await ((_M = telemetryDispatcher.onError) == null ? void 0 : _M.call(telemetryDispatcher, error));
     }
     if (hasTerminalError) {
       if (options.onError) {
         await options.onError({ error: terminalError });
       }
-      await ((_M = telemetryDispatcher.onError) == null ? void 0 : _M.call(telemetryDispatcher, terminalError));
+      await ((_N = telemetryDispatcher.onError) == null ? void 0 : _N.call(telemetryDispatcher, terminalError));
     }
     const messages = finalMessages != null ? finalMessages : prompt.messages;
-    const effectiveOutput = (_N = options.output) != null ? _N : this.output;
+    const effectiveOutput = (_O = options.output) != null ? _O : this.output;
     let experimentalOutput = void 0;
     if (effectiveOutput && steps.length > 0) {
       const lastStep2 = steps[steps.length - 1];
@@ -1837,12 +1870,12 @@ var WorkflowAgent = class {
     }
     const lastStep = steps[steps.length - 1];
     const totalUsage = aggregateUsage(steps);
-    const finishReason = (_O = lastStep == null ? void 0 : lastStep.finishReason) != null ? _O : "other";
+    const finishReason = (_P = lastStep == null ? void 0 : lastStep.finishReason) != null ? _P : "other";
     if (mergedOnEnd && !wasAborted) {
       await mergedOnEnd({
         steps,
         messages,
-        text: (_P = lastStep == null ? void 0 : lastStep.text) != null ? _P : "",
+        text: (_Q = lastStep == null ? void 0 : lastStep.text) != null ? _Q : "",
         finishReason,
         usage: totalUsage,
         totalUsage,
@@ -1854,7 +1887,7 @@ var WorkflowAgent = class {
     if (!wasAborted && steps.length > 0) {
       const telemetrySteps = steps.map(normalizeStepForTelemetry2);
       const lastTelemetryStep = telemetrySteps[telemetrySteps.length - 1];
-      await ((_Q = telemetryDispatcher.onEnd) == null ? void 0 : _Q.call(telemetryDispatcher, {
+      await ((_R = telemetryDispatcher.onEnd) == null ? void 0 : _R.call(telemetryDispatcher, {
         ...lastTelemetryStep,
         steps: telemetrySteps,
         usage: totalUsage,
@@ -1863,8 +1896,8 @@ var WorkflowAgent = class {
     }
     if (hasEncounteredError) {
       if (options.writable) {
-        const sendFinish = (_R = options.sendFinish) != null ? _R : true;
-        const preventClose = (_S = options.preventClose) != null ? _S : false;
+        const sendFinish = (_S = options.sendFinish) != null ? _S : true;
+        const preventClose = (_T = options.preventClose) != null ? _T : false;
         if (sendFinish || !preventClose) {
           await closeStream(options.writable, preventClose, sendFinish);
         }
@@ -1872,8 +1905,8 @@ var WorkflowAgent = class {
       throw encounteredError;
     }
     if (options.writable) {
-      const sendFinish = (_T = options.sendFinish) != null ? _T : true;
-      const preventClose = (_U = options.preventClose) != null ? _U : false;
+      const sendFinish = (_U = options.sendFinish) != null ? _U : true;
+      const preventClose = (_V = options.preventClose) != null ? _V : false;
       if (sendFinish || !preventClose) {
         await closeStream(options.writable, preventClose, sendFinish);
       }
@@ -1915,21 +1948,101 @@ async function closeStream(writable, preventClose, sendFinish) {
     await writable.close();
   }
 }
-async function writeApprovalRequests(writable, toolCalls) {
+async function writeApprovalRequests(writable, approvalRequests) {
   "use step";
   const writer = writable.getWriter();
   try {
-    for (const tc of toolCalls) {
+    for (const request of approvalRequests) {
       await writer.write({
         type: "tool-approval-request",
-        approvalId: `approval-${tc.toolCallId}`,
-        toolCallId: tc.toolCallId
+        approvalId: request.approvalId,
+        toolCallId: request.toolCallId,
+        ...request.signature != null ? { signature: request.signature } : {}
       });
     }
   } finally {
     writer.releaseLock();
   }
 }
+async function signWorkflowToolApproval({
+  secret,
+  approvalId,
+  toolCallId,
+  toolName,
+  input
+}) {
+  "use step";
+  return signToolApproval({
+    secret: getWorkflowToolApprovalSecret(secret),
+    approvalId,
+    toolCallId,
+    toolName,
+    input
+  });
+}
+async function verifyWorkflowToolApprovalSignature({
+  secret,
+  signature,
+  approvalId,
+  toolCallId,
+  toolName,
+  input
+}) {
+  "use step";
+  return verifyToolApprovalSignature({
+    secret: getWorkflowToolApprovalSecret(secret),
+    signature,
+    approvalId,
+    toolCallId,
+    toolName,
+    input
+  });
+}
+async function validateWorkflowToolApprovalSignature({
+  secret,
+  signature,
+  approvalId,
+  toolCallId,
+  toolName,
+  input
+}) {
+  if (secret == null) {
+    return;
+  }
+  if (signature == null) {
+    throw new InvalidToolApprovalSignatureError({
+      approvalId,
+      toolCallId,
+      reason: "missing signature"
+    });
+  }
+  const valid = await verifyWorkflowToolApprovalSignature({
+    secret,
+    signature,
+    approvalId,
+    toolCallId,
+    toolName,
+    input
+  });
+  if (!valid) {
+    throw new InvalidToolApprovalSignatureError({
+      approvalId,
+      toolCallId,
+      reason: "invalid signature"
+    });
+  }
+}
+function getWorkflowToolApprovalSecret({
+  environmentVariable
+}) {
+  const secret = process.env[environmentVariable];
+  if (secret == null) {
+    throw new Error(
+      `Tool approval secret environment variable "${environmentVariable}" is not set`
+    );
+  }
+  return secret;
+}
 async function writeToolResults(writable, results, writeStepBoundary = false) {
   "use step";
   const writer = writable.getWriter();
@@ -2260,15 +2373,15 @@ function toUIMessageChunk(part) {
     case "model-call-end":
     case "raw":
       return void 0;
+    case "tool-approval-request":
+      return {
+        type: "tool-approval-request",
+        approvalId: part.approvalId,
+        toolCallId: "toolCallId" in part ? part.toolCallId : part.toolCall.toolCallId,
+        ...part.signature != null ? { signature: part.signature } : {}
+      };
     default: {
       const passthroughPart = part;
-      if (passthroughPart.type === "tool-approval-request") {
-        return {
-          type: "tool-approval-request",
-          approvalId: passthroughPart.approvalId,
-          toolCallId: passthroughPart.toolCallId
-        };
-      }
       if (passthroughPart.type === "finish-step" || passthroughPart.type === "start-step" || passthroughPart.type === "tool-output-denied") {
         return passthroughPart;
       }