ai 6.0.276 → 6.0.277

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # ai
 
+## 6.0.277
+
+### Patch Changes
+
+- Updated dependencies [8839d87]
+  - @ai-sdk/gateway@3.0.189
+
 ## 6.0.276
 
 ### Patch Changes

package/dist/index.js

@@ -1334,7 +1334,7 @@ function detectMediaType({
 var import_provider_utils3 = require("@ai-sdk/provider-utils");
 
 // src/version.ts
-var VERSION = true ? "6.0.276" : "0.0.0-test";
+var VERSION = true ? "6.0.277" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/dist/index.mjs

@@ -1224,7 +1224,7 @@ import {
 } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "6.0.276" : "0.0.0-test";
+var VERSION = true ? "6.0.277" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/dist/internal/index.js

@@ -164,7 +164,7 @@ function detectMediaType({
 var import_provider_utils2 = require("@ai-sdk/provider-utils");
 
 // src/version.ts
-var VERSION = true ? "6.0.276" : "0.0.0-test";
+var VERSION = true ? "6.0.277" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/dist/internal/index.mjs

@@ -144,7 +144,7 @@ import {
 } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "6.0.276" : "0.0.0-test";
+var VERSION = true ? "6.0.277" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/docs/02-foundations/02-providers-and-models.mdx

@@ -118,6 +118,7 @@ Here are the capabilities of popular models:
 | [xAI Grok](/providers/ai-sdk-providers/xai)        | `grok-3`                                    | <Cross size={18} /> | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> |
 | [xAI Grok](/providers/ai-sdk-providers/xai)        | `grok-3-mini`                               | <Cross size={18} /> | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> |
 | [Vercel](/providers/ai-sdk-providers/vercel)       | `v0-1.0-md`                                 | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> |
+| [OpenAI](/providers/ai-sdk-providers/openai)       | `gpt-6-astra`                               | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> |
 | [OpenAI](/providers/ai-sdk-providers/openai)       | `gpt-5.6`                                   | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> |
 | [OpenAI](/providers/ai-sdk-providers/openai)       | `gpt-5.6-luna`                              | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> |
 | [OpenAI](/providers/ai-sdk-providers/openai)       | `gpt-5.6-sol`                               | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> | <Check size={18} /> |

package/docs/03-ai-sdk-core/16-mcp-tools.mdx

@@ -240,6 +240,69 @@ const tools = await mcpClient.tools();
 
 This approach is simpler to implement and automatically stays in sync with server changes. However, you won't have TypeScript type safety during development, and all tools from the server will be loaded
 
+### Tool Annotations and Approval
+
+MCP servers can describe tool behavior with annotations such as
+`readOnlyHint`, `destructiveHint`, `idempotentHint`, and `openWorldHint`. The
+MCP client exposes these annotations on each tool's `metadata.annotations` and
+on the resulting tool call's `toolMetadata.annotations`.
+
+Annotations are untrusted, server-provided hints. The MCP client does not turn
+them into an approval policy automatically. Applications should combine them
+with deterministic controls such as tool allowlists, scoped credentials, and
+their own [`needsApproval`](/docs/ai-sdk-core/tools-and-tool-calling#tool-execution-approval)
+policy.
+
+The following conservative policy allows tools to run automatically only when
+the server explicitly marks them as read-only. Tools with `readOnlyHint: false`
+or no `readOnlyHint` require user approval:
+
+```typescript
+import { type McpProviderMetadata } from '@ai-sdk/mcp';
+
+const mcpTools = await mcpClient.tools();
+const tools = Object.fromEntries(
+  Object.entries(mcpTools).map(([name, mcpTool]) => {
+    const annotations = (mcpTool.metadata as McpProviderMetadata | undefined)
+      ?.annotations;
+
+    return [
+      name,
+      {
+        ...mcpTool,
+        needsApproval: annotations?.readOnlyHint !== true,
+      },
+    ];
+  }),
+);
+
+const result = streamText({
+  model: __MODEL__,
+  tools,
+  prompt,
+});
+```
+
+See the
+[local tool annotations example](https://github.com/vercel/ai/tree/main/examples/mcp/src/tool-annotations)
+for a complete annotated MCP server and application-layer approval
+configuration. Start the server and client in separate terminals:
+
+```bash
+cd examples/mcp
+pnpm server:tool-annotations
+```
+
+```bash
+cd examples/mcp
+pnpm client:tool-annotations
+```
+
+Ask the client to read, delete, or create a note. The read-only tool executes
+immediately. The destructive and unannotated tools prompt for approval; after
+you enter `y` or `n`, the client sends the decision back and prints the model's
+response.
+
 ### Schema Definition
 
 For better type safety and control, you can define the tools and their input schemas explicitly in your client code:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai",
-  "version": "6.0.276",
+  "version": "6.0.277",
   "description": "AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.",
   "license": "Apache-2.0",
   "sideEffects": false,
@@ -45,7 +45,7 @@
   },
   "dependencies": {
     "@opentelemetry/api": "^1.9.0",
-    "@ai-sdk/gateway": "3.0.188",
+    "@ai-sdk/gateway": "3.0.189",
     "@ai-sdk/provider": "3.0.15",
     "@ai-sdk/provider-utils": "4.0.50"
   },