ai 6.0.187 → 6.0.188

package/dist/internal/index.js

@@ -152,7 +152,7 @@ function detectMediaType({
 var import_provider_utils2 = require("@ai-sdk/provider-utils");
 
 // src/version.ts
-var VERSION = true ? "6.0.187" : "0.0.0-test";
+var VERSION = true ? "6.0.188" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/dist/internal/index.mjs

@@ -131,7 +131,7 @@ import {
 } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "6.0.187" : "0.0.0-test";
+var VERSION = true ? "6.0.188" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/docs/07-reference/01-ai-sdk-core/16-tool-loop-agent.mdx

@@ -55,6 +55,13 @@ To see `ToolLoopAgent` in action, check out [these examples](#examples).
       description:
         'Instructions for the agent, usually used for system prompt/context.',
     },
+    {
+      name: 'allowSystemInMessages',
+      type: 'boolean',
+      isOptional: true,
+      description:
+        'Whether `role: "system"` messages are allowed in the `prompt` or `messages` fields. When unset, system messages are rejected because they can create a prompt injection attack risk. Ideally, use the `instructions` option instead. Set to `true` to allow system messages, or `false` to explicitly reject them.',
+    },
     {
       name: 'tools',
       type: 'Record<string, Tool>',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai",
-  "version": "6.0.187",
+  "version": "6.0.188",
   "description": "AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.",
   "license": "Apache-2.0",
   "sideEffects": false,

package/src/agent/tool-loop-agent-settings.ts

@@ -48,6 +48,16 @@ export type ToolLoopAgentSettings<
    */
   instructions?: string | SystemModelMessage | Array<SystemModelMessage>;
 
+  /**
+   * Whether system messages are allowed in the `prompt` or `messages` fields.
+   *
+   * When disabled, system messages must be provided through the `instructions`
+   * option.
+   *
+   * @default false
+   */
+  allowSystemInMessages?: boolean;
+
   /**
    * The language model to use.
    */
@@ -161,6 +171,7 @@ export type ToolLoopAgentSettings<
         | 'seed'
         | 'headers'
         | 'instructions'
+        | 'allowSystemInMessages'
         | 'stopWhen'
         | 'experimental_telemetry'
         | 'activeTools'
@@ -183,6 +194,7 @@ export type ToolLoopAgentSettings<
       | 'seed'
       | 'headers'
       | 'instructions'
+      | 'allowSystemInMessages'
       | 'stopWhen'
       | 'experimental_telemetry'
       | 'activeTools'

package/src/agent/tool-loop-agent.ts

@@ -63,7 +63,7 @@ export class ToolLoopAgent<
   }): Promise<
     Omit<
       ToolLoopAgentSettings<CALL_OPTIONS, TOOLS, OUTPUT>,
-      'prepareCall' | 'instructions' | 'onStepFinish'
+      'prepareCall' | 'instructions' | 'allowSystemInMessages' | 'onStepFinish'
     > &
       Prompt
   > {
@@ -96,13 +96,24 @@ export class ToolLoopAgent<
         >[0],
       )) ?? baseCallArgs;
 
-    const { instructions, messages, prompt, ...callArgs } = preparedCallArgs;
+    const {
+      instructions,
+      allowSystemInMessages,
+      messages,
+      prompt,
+      ...callArgs
+    } = preparedCallArgs;
 
     return {
       ...callArgs,
 
       // restore prompt types
-      ...({ system: instructions, messages, prompt } as Prompt),
+      ...({
+        system: instructions,
+        allowSystemInMessages,
+        messages,
+        prompt,
+      } as Prompt),
     };
   }