ai 6.0.311 → 6.0.313

package/dist/internal/index.js

@@ -164,7 +164,7 @@ function detectMediaType({
 var import_provider_utils2 = require("@ai-sdk/provider-utils");
 
 // src/version.ts
-var VERSION = true ? "6.0.311" : "0.0.0-test";
+var VERSION = true ? "6.0.313" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/dist/internal/index.mjs

@@ -144,7 +144,7 @@ import {
 } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "6.0.311" : "0.0.0-test";
+var VERSION = true ? "6.0.313" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/docs/03-ai-sdk-core/16-mcp-tools.mdx

@@ -156,6 +156,33 @@ tokens are invalid.
 
 ### OAuth Authorization Server Validation
 
+Pre-registered confidential clients must be bound to their authorization server
+before starting OAuth. Set `issuer` on the credentials returned by
+`clientInformation()` to the issuer of the server that registered the client:
+
+```typescript
+clientInformation() {
+  return {
+    client_id: process.env.OAUTH_CLIENT_ID!,
+    client_secret: process.env.OAUTH_CLIENT_SECRET!,
+    issuer: 'https://accounts.example.com',
+  };
+}
+```
+
+The issuer must exactly match the discovered issuer. The SDK rejects a mismatch
+before redirecting or sending credentials, even if a stored authorization flow
+pin names the discovered server. Dynamic client registration attaches this
+binding automatically.
+
+Existing complete authorization server bindings on credentials, stored tokens,
+or `authorizationServerInformation()` are also supported. Without a binding,
+a pre-registered client secret or custom `addClientAuthentication` handler is
+rejected, even when `validateAuthorizationServerURL` accepts the selected server.
+Approving a server does not establish that the credentials belong to it.
+Do not derive the credential issuer from the MCP server's metadata; configure it
+from the client's registration.
+
 When using MCP OAuth in server-side applications, the MCP server can advertise
 the OAuth authorization server to use. If you connect to MCP servers outside
 your control, implement `validateAuthorizationServerURL` on your
@@ -183,8 +210,8 @@ const myOAuthClientProvider = {
 ```
 
 This hook is called before the SDK fetches authorization server metadata, so a
-rejected URL is not requested. It is optional and does not change existing OAuth
-flows unless you implement it.
+rejected URL is not requested. The hook is an optional additional restriction;
+it does not replace the credential binding required for confidential clients.
 
 ### OAuth Callback Issuer Validation
 

package/docs/03-ai-sdk-core/37-speech.mdx

@@ -142,6 +142,7 @@ try {
 | [OpenAI](/providers/ai-sdk-providers/openai#speech-models)         | `tts-1-hd`               |
 | [OpenAI](/providers/ai-sdk-providers/openai#speech-models)         | `gpt-4o-mini-tts`        |
 | [Mistral](/providers/ai-sdk-providers/mistral#speech-models)       | `voxtral-mini-tts-2603`  |
+| [Mistral](/providers/ai-sdk-providers/mistral#speech-models)       | `voxtral-mini-tts-3-0`   |
 | [Azure Speech](/providers/ai-sdk-providers/azure#mai-voice)        | `mai-voice-2.1-flash`    |
 | [Azure Speech](/providers/ai-sdk-providers/azure#mai-voice)        | `mai-voice-2.1`          |
 | [Azure Speech](/providers/ai-sdk-providers/azure#mai-voice)        | `mai-voice-2-flash`      |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai",
-  "version": "6.0.311",
+  "version": "6.0.313",
   "description": "AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.",
   "license": "Apache-2.0",
   "sideEffects": false,
@@ -45,9 +45,9 @@
   },
   "dependencies": {
     "@opentelemetry/api": "^1.9.0",
-    "@ai-sdk/gateway": "3.0.218",
+    "@ai-sdk/gateway": "3.0.220",
     "@ai-sdk/provider": "3.0.19",
-    "@ai-sdk/provider-utils": "4.0.61"
+    "@ai-sdk/provider-utils": "4.0.62"
   },
   "devDependencies": {
     "@edge-runtime/vm": "^5.0.0",
@@ -58,7 +58,7 @@
     "tsx": "^4.19.2",
     "typescript": "5.8.3",
     "zod": "3.25.76",
-    "@ai-sdk/google": "3.0.136",
+    "@ai-sdk/google": "3.0.137",
     "@ai-sdk/test-server": "1.0.6",
     "@vercel/ai-tsconfig": "0.0.0"
   },

package/src/generate-text/collect-tool-approvals.ts

@@ -73,6 +73,7 @@ export function collectToolApprovals<TOOLS extends ToolSet>({
 
   const approvedToolApprovals: Array<CollectedToolApprovals<TOOLS>> = [];
   const deniedToolApprovals: Array<CollectedToolApprovals<TOOLS>> = [];
+  const collectedToolCallIds = new Set<string>();
 
   const approvalResponses = lastMessage.content.filter(
     part => part.type === 'tool-approval-response',
@@ -99,6 +100,15 @@ export function collectToolApprovals<TOOLS extends ToolSet>({
       });
     }
 
+    // Only the first response for a tool call is collected. Later responses
+    // (replays, conflicting decisions, or responses to another approval of the
+    // same call) would otherwise execute the tool twice or both execute and
+    // deny it.
+    if (collectedToolCallIds.has(toolCall.toolCallId)) {
+      continue;
+    }
+    collectedToolCallIds.add(toolCall.toolCallId);
+
     const approval: CollectedToolApprovals<TOOLS> = {
       approvalRequest,
       approvalResponse,

package/src/generate-text/prune-messages.ts

@@ -161,42 +161,95 @@ export function pruneMessages({
         return message;
       }
 
-      return {
-        ...message,
-        content: message.content.filter(part => {
-          // keep non-tool parts:
-          if (
-            part.type !== 'tool-call' &&
-            part.type !== 'tool-result' &&
-            part.type !== 'tool-approval-request' &&
-            part.type !== 'tool-approval-response'
-          ) {
-            return true;
+      const keepParts = message.content.map(part => {
+        // keep non-tool parts:
+        if (
+          part.type !== 'tool-call' &&
+          part.type !== 'tool-result' &&
+          part.type !== 'tool-approval-request' &&
+          part.type !== 'tool-approval-response'
+        ) {
+          return true;
+        }
+
+        // keep parts that are associated with a tool call or approval that needs to be kept:
+        if (
+          ((part.type === 'tool-call' || part.type === 'tool-result') &&
+            keptToolCallIds.has(part.toolCallId)) ||
+          ((part.type === 'tool-approval-request' ||
+            part.type === 'tool-approval-response') &&
+            keptApprovalIds.has(part.approvalId))
+        ) {
+          return true;
+        }
+
+        // keep parts that are not associated with a tool that should be removed:
+        const partToolName =
+          part.type === 'tool-call' || part.type === 'tool-result'
+            ? part.toolName
+            : approvalIdToToolName.get(part.approvalId);
+
+        return (
+          toolCall.tools != null &&
+          partToolName != null &&
+          !toolCall.tools.includes(partToolName)
+        );
+      });
+
+      // Consecutive reasoning parts can belong to the same provider item.
+      // Remove the whole group when its following content was pruned.
+      if (message.role === 'assistant') {
+        for (
+          let reasoningIndex = 0;
+          reasoningIndex < message.content.length;
+          reasoningIndex++
+        ) {
+          const part = message.content[reasoningIndex];
+          if (part.type !== 'reasoning') {
+            continue;
+          }
+
+          let reasoningEndIndex = reasoningIndex + 1;
+          while (reasoningEndIndex < message.content.length) {
+            const nextPart = message.content[reasoningEndIndex];
+            if (nextPart.type !== 'reasoning') {
+              break;
+            }
+            reasoningEndIndex++;
+          }
+
+          let followingPartIndex = reasoningEndIndex;
+          let hasFollowingPart = false;
+          let hasKeptFollowingPart = false;
+
+          while (followingPartIndex < message.content.length) {
+            const followingPart = message.content[followingPartIndex];
+            if (followingPart.type === 'reasoning') {
+              break;
+            }
+
+            hasFollowingPart = true;
+            hasKeptFollowingPart ||= keepParts[followingPartIndex];
+            followingPartIndex++;
           }
 
-          // keep parts that are associated with a tool call or approval that needs to be kept:
-          if (
-            ((part.type === 'tool-call' || part.type === 'tool-result') &&
-              keptToolCallIds.has(part.toolCallId)) ||
-            ((part.type === 'tool-approval-request' ||
-              part.type === 'tool-approval-response') &&
-              keptApprovalIds.has(part.approvalId))
-          ) {
-            return true;
+          if (hasFollowingPart && !hasKeptFollowingPart) {
+            for (
+              let index = reasoningIndex;
+              index < reasoningEndIndex;
+              index++
+            ) {
+              keepParts[index] = false;
+            }
           }
 
-          // keep parts that are not associated with a tool that should be removed:
-          const partToolName =
-            part.type === 'tool-call' || part.type === 'tool-result'
-              ? part.toolName
-              : approvalIdToToolName.get(part.approvalId);
-
-          return (
-            toolCall.tools != null &&
-            partToolName != null &&
-            !toolCall.tools.includes(partToolName)
-          );
-        }),
+          reasoningIndex = followingPartIndex - 1;
+        }
+      }
+
+      return {
+        ...message,
+        content: message.content.filter((_, index) => keepParts[index]),
       } as AssistantModelMessage | ToolModelMessage;
     });
   }

package/src/ui/process-ui-message-stream.ts

@@ -253,6 +253,7 @@ export function processUIMessageStream<UI_MESSAGE extends UIMessage>({
 
             if (part != null) {
               part.state = options.state;
+              anyPart.type = `tool-${options.toolName}`;
               anyPart.input = anyOptions.input;
               anyPart.output = anyOptions.output;
               anyPart.errorText = anyOptions.errorText;