@ai-sdk/workflow 2.0.7 → 2.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdk/workflow",
-  "version": "2.0.7",
+  "version": "2.0.9",
   "type": "module",
   "description": "WorkflowAgent for building AI agents with AI SDK",
   "license": "Apache-2.0",
@@ -26,20 +26,20 @@
     }
   },
   "dependencies": {
-    "ajv": "^8.20.0",
-    "@ai-sdk/provider": "4.0.7",
-    "@ai-sdk/provider-utils": "5.0.29",
-    "ai": "7.0.77"
+    "@ai-sdk/provider": "4.0.8",
+    "@ai-sdk/provider-utils": "5.0.30",
+    "ai": "7.0.79",
+    "ajv": "^8.20.0"
   },
   "devDependencies": {
     "@types/node": "22.19.19",
+    "@vercel/ai-tsconfig": "0.0.0",
     "@workflow/vitest": "5.0.0-beta.42",
     "tsup": "^8.5.1",
     "typescript": "5.8.3",
     "vitest": "4.1.6",
     "workflow": "5.0.0-beta.42",
-    "zod": "4.4.3",
-    "@vercel/ai-tsconfig": "0.0.0"
+    "zod": "4.4.3"
   },
   "peerDependencies": {
     "workflow": "^5.0.0-beta.42",

package/src/normalize-ui-message-stream.ts

@@ -2,12 +2,12 @@ import type { UIMessageChunk } from 'ai';
 
 /**
  * Tracks, for one part family (text or reasoning), which part ids are open or
- * ended within the current step.
+ * have ended since the latest step boundary.
  */
 interface PartFrameState {
-  /** A `*-start` was seen and not yet ended in the current step. */
+  /** A `*-start` was seen and has not yet received its explicit `*-end`. */
   open: Set<string>;
-  /** A part that was opened and ended in the current step. */
+  /** A part that ended since the latest step boundary. */
   ended: Set<string>;
 }
 
@@ -18,7 +18,7 @@ const newPartFrameState = (): PartFrameState => ({
 
 /**
  * Repairs the framing for a single `*-start` / `*-delta` / `*-end` chunk
- * against the running per-step state, yielding the chunks the consumer should
+ * against the running framing state, yielding the chunks the consumer should
  * see. Text and reasoning parts share this logic (`startType` differentiates
  * the synthesized start chunk).
  *
@@ -32,7 +32,8 @@ function* repairPart(
   startType: 'text-start' | 'reasoning-start',
 ): Generator<UIMessageChunk> {
   if (kind === 'start') {
-    // Drop a duplicate/replayed start for a part already framed this step.
+    // Drop a duplicate/replayed start for a part that is still open or has
+    // already ended since the latest step boundary.
     if (state.open.has(id) || state.ended.has(id)) {
       return;
     }
@@ -70,10 +71,9 @@ function* repairPart(
  * whole turn. Two properties of the durable streaming model make that error
  * reachable:
  *
- * - A workflow run owns a single shared stream, and the consumer resets its
- *   active-part maps on every `finish-step`. Multi-step turns reuse the same
- *   part id (commonly `"0"`) in each step, so a single dropped or duplicated
- *   `*-start` across a step boundary orphans the rest of that step's content.
+ * - A workflow run owns a single shared stream. Multi-step turns can reuse the
+ *   same part id (commonly `"0"`), so a dropped or duplicated `*-start` can
+ *   orphan the rest of that part's content.
  * - The same stream is read across reconnects, and a stream-producing step can
  *   run more than once (retry/redelivery, or the concurrent-worker duplication
  *   tracked in vercel/workflow#2331 and #2039). Either can interleave or
@@ -86,11 +86,12 @@ function* repairPart(
  *
  * ## What it does
  *
- * Mirrors the consumer's part-lifetime state machine, per part type, per step:
- * - resets tracking on `finish-step` (exactly where the consumer resets);
+ * Mirrors the consumer's explicit-end part-lifetime state machine per part type:
+ * - keeps open parts active across `finish-step`, while allowing ended ids to
+ *   be reused by a later step;
  * - synthesizes a missing `*-start` when an orphaned `*-delta`/`*-end` arrives;
  * - drops a re-delivered `*-start`/`*-delta`/`*-end` for a part already
- *   open or ended in the current step (reconnect/replay overlap).
+ *   open or ended since the latest step boundary (reconnect/replay overlap).
  *
  * A well-formed stream passes through unchanged.
  *
@@ -126,11 +127,10 @@ export async function* normalizeUIMessageStreamParts(
         break;
 
       case 'finish-step':
-        // The consumer clears its active-part maps here, so part ids may be
-        // legitimately reused in the next step. Reset to match.
-        text.open.clear();
+        // Open parts are closed only by explicit end chunks. A finish-step can
+        // come from another interleaved execution while a part is still open.
+        // Ended ids may be reused by the next step.
         text.ended.clear();
-        reasoning.open.clear();
         reasoning.ended.clear();
         yield chunk;
         break;

package/src/workflow-agent.ts

@@ -1562,12 +1562,12 @@ export class WorkflowAgent<
           }
 
           // Re-validate through the shared core implementation: input schema,
-          // HMAC signature (when configured), and approval policy. It throws on
-          // invalid input/signature; convert that to a denial result so the
-          // agent loop can continue gracefully.
+          // HMAC signature (when configured), and approval policy. Convert
+          // invalid input, denial, or signature errors to a tool error result
+          // so the agent loop can continue gracefully.
           let revalidationReason: string | undefined;
           try {
-            const { deniedToolApprovals: policyDenied } =
+            const { deniedToolApprovals: policyDenied, invalidToolApprovals } =
               await validateApprovedToolApprovals({
                 approvedToolApprovals: [approval.collected],
                 tools: this.tools as ToolSet,
@@ -1577,7 +1577,12 @@ export class WorkflowAgent<
                   effectiveToolsContext as InferToolSetContext<ToolSet>,
                 runtimeContext: effectiveRuntimeContext,
               });
-            if (policyDenied.length > 0) {
+
+            if (invalidToolApprovals.length > 0) {
+              revalidationReason = getErrorMessage(
+                invalidToolApprovals[0].error,
+              );
+            } else if (policyDenied.length > 0) {
               revalidationReason =
                 policyDenied[0].approvalResponse.reason ??
                 'Tool approval denied';