ai 7.0.113 → 7.0.116

package/docs/07-reference/04-ai-sdk-workflow/01-workflow-agent.mdx

@@ -17,7 +17,7 @@ import { tool } from 'ai';
 import { z } from 'zod';
 
 const agent = new WorkflowAgent({
-  model: 'anthropic/claude-sonnet-4-6',
+  model: 'anthropic/claude-sonnet-5',
   instructions: 'You are a helpful assistant.',
   tools: {
     weather: tool({
@@ -71,7 +71,7 @@ To see `WorkflowAgent` in action, check out [these examples](#examples).
       type: 'LanguageModel',
       isRequired: true,
       description:
-        "The language model to use. A string compatible with the Vercel AI Gateway (e.g., 'anthropic/claude-sonnet-4-6') or a provider instance (e.g., `openai('gpt-4o')`).",
+        "The language model to use. A string compatible with the Vercel AI Gateway (e.g., 'anthropic/claude-sonnet-5') or a provider instance (e.g., `openai('gpt-6-astra')`).",
     },
     {
       name: 'instructions',
@@ -808,7 +808,7 @@ Infers the UI message type for a `WorkflowAgent` instance. Optionally accepts a
 import { WorkflowAgent, InferWorkflowAgentUIMessage } from '@ai-sdk/workflow';
 
 const agent = new WorkflowAgent({
-  model: 'anthropic/claude-sonnet-4-6',
+  model: 'anthropic/claude-sonnet-5',
   tools: { weather: weatherTool },
 });
 
@@ -835,7 +835,7 @@ import { tool } from 'ai';
 import { z } from 'zod';
 
 const agent = new WorkflowAgent({
-  model: 'anthropic/claude-sonnet-4-6',
+  model: 'anthropic/claude-sonnet-5',
   instructions: 'You are a helpful assistant.',
   tools: {
     weather: tool({
@@ -890,7 +890,7 @@ export async function chat(messages: UIMessage[]) {
   const modelMessages = await convertToModelMessages(messages);
 
   const agent = new WorkflowAgent({
-    model: 'anthropic/claude-sonnet-4-6',
+    model: 'anthropic/claude-sonnet-5',
     instructions: 'You are a flight booking assistant.',
     tools: {
       searchFlights: tool({
@@ -937,7 +937,7 @@ import { WorkflowAgent, Output } from '@ai-sdk/workflow';
 import { z } from 'zod';
 
 const analysisAgent = new WorkflowAgent({
-  model: 'anthropic/claude-sonnet-4-6',
+  model: 'anthropic/claude-sonnet-5',
 });
 
 const result = await analysisAgent.stream({
@@ -977,7 +977,7 @@ import { tool } from 'ai';
 import { z } from 'zod';
 
 const agent = new WorkflowAgent({
-  model: 'anthropic/claude-sonnet-4-6',
+  model: 'anthropic/claude-sonnet-5',
   experimental_toolApprovalSecret: {
     environmentVariable: 'TOOL_APPROVAL_SECRET',
   },
@@ -1009,7 +1009,7 @@ serialize it. A stream-level reference overrides the constructor value.
 import { WorkflowAgent } from '@ai-sdk/workflow';
 
 const agent = new WorkflowAgent({
-  model: 'anthropic/claude-sonnet-4-6',
+  model: 'anthropic/claude-sonnet-5',
   tools: { weather: weatherTool },
 
   // Agent-wide callbacks

package/docs/07-reference/06-ai-sdk-tui/01-run-agent-tui.mdx

@@ -17,7 +17,7 @@ import { runAgentTUI } from '@ai-sdk/tui';
 import { ToolLoopAgent } from 'ai';
 
 const agent = new ToolLoopAgent({
-  model: openai('gpt-5'),
+  model: openai('gpt-6-astra'),
   instructions: 'You are a helpful terminal assistant.',
 });
 
@@ -191,17 +191,21 @@ await runAgentTUI({
 ## Example with Sandbox
 
 ```ts
-import { createJustBashSandbox } from '@ai-sdk/sandbox-just-bash';
+import { createJustBashNetworkSandboxSession } from '@ai-sdk/sandbox-just-bash';
 
-const sandboxSession = await createJustBashSandbox({
+const sandboxSession = await createJustBashNetworkSandboxSession({
   cwd: '/home/user',
-}).createSession();
-
-await runAgentTUI({
-  title: 'Sandbox Assistant',
-  agent,
-  sandbox: sandboxSession.restricted(),
 });
+
+try {
+  await runAgentTUI({
+    title: 'Sandbox Assistant',
+    agent,
+    sandbox: sandboxSession.restricted(),
+  });
+} finally {
+  await sandboxSession.destroy();
+}
 ```
 
 The sandbox is forwarded to every `agent.stream()` call as

package/docs/09-troubleshooting/11-use-chat-custom-request-options.mdx

@@ -73,7 +73,7 @@ const { messages, sendMessage } = useChat({
       'X-App-ID': 'my-app', // Static app identifier
     },
     body: {
-      model: 'gpt-5.1', // Default model
+      model: 'gpt-6-astra', // Default model
       stream: true, // Static configuration
     },
     credentials: 'include', // Static credentials policy
@@ -125,7 +125,7 @@ const { messages, sendMessage } = useChat({
       'X-API-Version': 'v1',
     },
     body: {
-      model: 'gpt-5.1',
+      model: 'gpt-6-astra',
     },
   }),
 });
@@ -139,7 +139,7 @@ sendMessage(
       'X-Request-ID': '123', // This is added
     },
     body: {
-      model: 'gpt-5-mini', // This overrides the hook-level body field
+      model: 'gpt-4.1-mini', // Supports the temperature setting below
       temperature: 0.5, // This is added
     },
   },

package/docs/09-troubleshooting/13-repeated-assistant-messages.mdx

@@ -15,7 +15,7 @@ export async function POST(req: Request) {
   const { messages } = await req.json();
 
   const result = streamText({
-    model: 'openai/gpt-5-mini',
+    model: 'openai/gpt-6-luna',
     messages: await convertToModelMessages(messages),
     tools: {
       weather: {
@@ -49,7 +49,7 @@ export async function POST(req: Request) {
   const { messages } = await req.json();
 
   const result = streamText({
-    model: 'openai/gpt-5-mini',
+    model: 'openai/gpt-6-luna',
     messages: await convertToModelMessages(messages),
     tools: {
       weather: {

package/docs/09-troubleshooting/17-use-chat-stale-body-data.mdx

@@ -128,7 +128,7 @@ export async function POST(req: Request) {
   const { messages, temperature, userId } = await req.json();
 
   const result = streamText({
-    model: 'openai/gpt-5-mini',
+    model: 'openai/gpt-4.1-mini', // Supports dynamic temperature settings
     messages: await convertToModelMessages(messages),
     temperature, // Use the dynamic temperature from the request
     // ... other configuration

package/docs/09-troubleshooting/70-high-memory-usage-with-images.mdx

@@ -30,7 +30,7 @@ import { generateText } from 'ai';
 import { openai } from '@ai-sdk/openai';
 
 const result = await generateText({
-  model: openai('gpt-4o'),
+  model: openai('gpt-6-astra'),
   messages: [
     {
       role: 'user',
@@ -85,7 +85,7 @@ const results = [];
 
 for (const imageUrl of imageUrls) {
   const result = await generateText({
-    model: openai('gpt-4o'),
+    model: openai('gpt-6-astra'),
     messages: [
       {
         role: 'user',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai",
-  "version": "7.0.113",
+  "version": "7.0.116",
   "type": "module",
   "description": "AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.",
   "license": "Apache-2.0",
@@ -42,20 +42,20 @@
     }
   },
   "dependencies": {
-    "@ai-sdk/gateway": "4.0.91",
+    "@ai-sdk/gateway": "4.0.94",
     "@ai-sdk/provider": "4.0.18",
-    "@ai-sdk/provider-utils": "5.0.47"
+    "@ai-sdk/provider-utils": "5.0.49"
   },
   "devDependencies": {
-    "@ai-sdk/amazon-bedrock": "5.0.93",
-    "@ai-sdk/deepseek": "3.0.52",
-    "@ai-sdk/google": "4.0.79",
-    "@ai-sdk/groq": "4.0.48",
-    "@ai-sdk/huggingface": "2.0.55",
-    "@ai-sdk/moonshotai": "3.0.56",
-    "@ai-sdk/openai": "4.0.74",
-    "@ai-sdk/test-server": "2.0.1",
-    "@ai-sdk/xai": "5.0.7",
+    "@ai-sdk/amazon-bedrock": "5.0.96",
+    "@ai-sdk/deepseek": "3.0.54",
+    "@ai-sdk/google": "4.0.82",
+    "@ai-sdk/groq": "4.0.50",
+    "@ai-sdk/huggingface": "2.0.57",
+    "@ai-sdk/moonshotai": "3.0.58",
+    "@ai-sdk/openai": "4.0.77",
+    "@ai-sdk/test-server": "2.0.2",
+    "@ai-sdk/xai": "5.0.10",
     "@edge-runtime/vm": "^5.0.0",
     "@smithy/eventstream-codec": "^4.3.3",
     "@smithy/util-utf8": "^4.3.3",

package/src/evaluate/evaluate.ts

@@ -10,7 +10,6 @@ import {
 } from '@ai-sdk/provider-utils';
 import { resolveEvaluationModel } from '../model/resolve-model';
 import { logWarnings } from '../logger/log-warnings';
-import { filterIncludedContext } from '../telemetry/filter-included-context';
 import type { TelemetryOptions } from '../telemetry/telemetry-options';
 import type { Callback } from '../util/callback';
 import { notify } from '../util/notify';
@@ -112,17 +111,9 @@ export async function evaluate<
     headers,
     providerOptions,
   };
-  const tracingStartEvent = {
-    ...startEvent,
-    runtimeContext: filterIncludedContext({
-      context: runtimeContext,
-      includeContext: telemetry?.includeRuntimeContext,
-    }),
-  };
-
   return await runInTracingChannelSpan({
     type: 'experimental_evaluate',
-    event: tracingStartEvent,
+    event: startEvent,
     execute: async () => {
       await notify({
         event: startEvent,

package/src/generate-text/restricted-telemetry-dispatcher.ts

@@ -1,10 +1,9 @@
-import type {
-  Context,
-  InferToolContext,
-  InferToolSetContext,
-  ToolSet,
-} from '@ai-sdk/provider-utils';
-import { filterIncludedContext } from '../telemetry/filter-included-context';
+import type { Context, ToolSet } from '@ai-sdk/provider-utils';
+import {
+  filterIncludedContext,
+  filterToolContext,
+  filterToolsContext,
+} from '../telemetry/filter-included-context';
 import { createTelemetryDispatcher } from '../telemetry/create-telemetry-dispatcher';
 import type { TelemetryDispatcher } from '../telemetry/telemetry';
 import type {
@@ -98,57 +97,6 @@ function restrictStepResult<
   });
 }
 
-/**
- * Returns a shallow copy of the tools context with only top-level properties
- * marked for telemetry inclusion for each tool.
- */
-function filterToolsContext<TOOLS extends ToolSet>({
-  toolsContext,
-  includeToolsContext,
-}: {
-  toolsContext: InferToolSetContext<TOOLS>;
-  includeToolsContext: IncludedToolsContext<TOOLS>;
-}): InferToolSetContext<TOOLS> {
-  if (includeToolsContext == null) {
-    return {} as InferToolSetContext<TOOLS>;
-  }
-
-  return Object.fromEntries(
-    Object.entries(toolsContext).map(([toolName, toolContext]) => [
-      toolName,
-      filterToolContext({
-        toolName,
-        toolContext,
-        includeToolsContext,
-      }),
-    ]),
-  ) as InferToolSetContext<TOOLS>;
-}
-
-function filterToolContext<TOOLS extends ToolSet>({
-  toolName,
-  toolContext,
-  includeToolsContext,
-}: {
-  toolName: string;
-  toolContext: unknown;
-  includeToolsContext: IncludedToolsContext<TOOLS>;
-}) {
-  const includeToolContext = (
-    includeToolsContext as
-      | Record<
-          string,
-          IncludedContext<InferToolContext<TOOLS[typeof toolName]>>
-        >
-      | undefined
-  )?.[toolName];
-
-  return filterIncludedContext({
-    context: toolContext as InferToolContext<TOOLS[typeof toolName]>,
-    includeContext: includeToolContext,
-  });
-}
-
 /**
  * Creates a telemetry dispatcher that only includes configured runtime context
  * properties in text-generation lifecycle events before dispatching them.

package/src/prompt/file-part-data.ts

@@ -24,7 +24,10 @@ type ConvertResult = {
   mediaType: string | undefined;
 };
 
-function convertUrlToFilePartData(url: URL): ConvertResult {
+function convertUrlToFilePartData(
+  url: URL,
+  originalUrl?: string,
+): ConvertResult {
   if (url.protocol === 'data:') {
     const { mediaType, base64Content } = splitDataUrl(url.toString());
 
@@ -38,7 +41,10 @@ function convertUrlToFilePartData(url: URL): ConvertResult {
     return { data: { type: 'data', data: base64Content }, mediaType };
   }
 
-  return { data: { type: 'url', url }, mediaType: undefined };
+  return {
+    data: { type: 'url', url, ...(originalUrl != null ? { originalUrl } : {}) },
+    mediaType: undefined,
+  };
 }
 
 function convertUrlStringToFilePartData(content: string): ConvertResult {
@@ -98,7 +104,7 @@ export function convertToLanguageModelV4FilePart(
         }
         return convertInlineDataToFilePartData(content.data);
       case 'url':
-        return convertUrlToFilePartData(content.url);
+        return convertUrlToFilePartData(content.url, content.originalUrl);
       case 'reference':
         return {
           data: { type: 'reference', reference: content.reference },

package/src/prompt/standardize-prompt.ts

@@ -82,6 +82,8 @@ export async function standardizePrompt({
     });
   }
 
+  // Require explicit trust in supplied system messages to reduce prompt-injection
+  // risk. The opt-in permits all system messages, including instruction text.
   if (
     !allowSystemInMessages &&
     messages.some(message => message.role === 'system')

package/src/telemetry/create-telemetry-dispatcher.ts

@@ -1,5 +1,10 @@
-import { asArray } from '@ai-sdk/provider-utils';
+import { asArray, type Context } from '@ai-sdk/provider-utils';
 import type { Callback } from '../util/callback';
+import {
+  filterIncludedContext,
+  filterToolContext,
+  filterToolsContext,
+} from './filter-included-context';
 import { mergeCallbacks } from '../util/merge-callbacks';
 import type {
   InferTelemetryEvent,
@@ -41,14 +46,59 @@ function augmentEvent<EVENT>(
   event: EVENT,
   telemetry: Pick<
     TelemetryOptions,
-    'recordInputs' | 'recordOutputs' | 'functionId'
+    | 'recordInputs'
+    | 'recordOutputs'
+    | 'functionId'
+    | 'includeRuntimeContext'
+    | 'includeToolsContext'
   >,
+  filterContext = false,
 ): InferTelemetryEvent<EVENT> {
-  return Object.assign(
+  const augmentedEvent = Object.assign(
     Object.create(Object.getPrototypeOf(event)),
     event,
-    telemetry,
+    {
+      recordInputs: telemetry.recordInputs,
+      recordOutputs: telemetry.recordOutputs,
+      functionId: telemetry.functionId,
+    },
   );
+
+  if (
+    filterContext &&
+    event != null &&
+    typeof event === 'object' &&
+    'runtimeContext' in event
+  ) {
+    augmentedEvent.runtimeContext = filterIncludedContext({
+      context: event.runtimeContext as Context,
+      includeContext: telemetry.includeRuntimeContext,
+    });
+  }
+
+  if (filterContext && event != null && typeof event === 'object') {
+    if ('toolsContext' in event) {
+      augmentedEvent.toolsContext = filterToolsContext({
+        toolsContext: event.toolsContext as Record<string, Context>,
+        includeToolsContext: telemetry.includeToolsContext,
+      });
+    } else if (
+      'toolContext' in event &&
+      event.toolContext != null &&
+      'toolCall' in event &&
+      event.toolCall != null &&
+      typeof event.toolCall === 'object' &&
+      'toolName' in event.toolCall
+    ) {
+      augmentedEvent.toolContext = filterToolContext({
+        toolName: event.toolCall.toolName as string,
+        toolContext: event.toolContext,
+        includeToolsContext: telemetry.includeToolsContext,
+      });
+    }
+  }
+
+  return augmentedEvent;
 }
 
 /**
@@ -86,6 +136,8 @@ export function createTelemetryDispatcher({
     recordInputs: telemetry?.recordInputs,
     recordOutputs: telemetry?.recordOutputs,
     functionId: telemetry?.functionId,
+    includeRuntimeContext: telemetry?.includeRuntimeContext,
+    includeToolsContext: telemetry?.includeToolsContext,
   };
 
   const mergeTelemetryCallback = <KEY extends TelemetryCallbackKey>(
@@ -127,7 +179,7 @@ export function createTelemetryDispatcher({
       await runWithTracingChannelSpan(
         {
           type,
-          event: augmentEvent(event, telemetryMetadata),
+          event: augmentEvent(event, telemetryMetadata, true),
         },
         execute,
       ),
@@ -136,7 +188,7 @@ export function createTelemetryDispatcher({
       openTelemetryChannelSpanContext({
         message: {
           type,
-          event: augmentEvent(event, telemetryMetadata),
+          event: augmentEvent(event, telemetryMetadata, true),
         },
         completion,
       }),

package/src/telemetry/filter-included-context.ts

@@ -1,5 +1,13 @@
-import type { Context } from '@ai-sdk/provider-utils';
-import type { IncludedContext } from './telemetry-options';
+import type {
+  Context,
+  InferToolContext,
+  InferToolSetContext,
+  ToolSet,
+} from '@ai-sdk/provider-utils';
+import type {
+  IncludedContext,
+  IncludedToolsContext,
+} from './telemetry-options';
 
 /**
  * Returns a shallow copy of the runtime context with only top-level
@@ -22,3 +30,50 @@ export function filterIncludedContext<CONTEXT extends Context>({
     ),
   );
 }
+
+export function filterToolsContext<TOOLS extends ToolSet>({
+  toolsContext,
+  includeToolsContext,
+}: {
+  toolsContext: InferToolSetContext<TOOLS>;
+  includeToolsContext: IncludedToolsContext<TOOLS>;
+}): InferToolSetContext<TOOLS> {
+  if (includeToolsContext == null) {
+    return {} as InferToolSetContext<TOOLS>;
+  }
+
+  return Object.fromEntries(
+    Object.entries(toolsContext).map(([toolName, toolContext]) => [
+      toolName,
+      filterToolContext({
+        toolName,
+        toolContext,
+        includeToolsContext,
+      }),
+    ]),
+  ) as InferToolSetContext<TOOLS>;
+}
+
+export function filterToolContext<TOOLS extends ToolSet>({
+  toolName,
+  toolContext,
+  includeToolsContext,
+}: {
+  toolName: string;
+  toolContext: unknown;
+  includeToolsContext: IncludedToolsContext<TOOLS>;
+}) {
+  const includeToolContext = (
+    includeToolsContext as
+      | Record<
+          string,
+          IncludedContext<InferToolContext<TOOLS[typeof toolName]>>
+        >
+      | undefined
+  )?.[toolName];
+
+  return filterIncludedContext({
+    context: toolContext as InferToolContext<TOOLS[typeof toolName]>,
+    includeContext: includeToolContext,
+  });
+}

package/src/util/download/download.ts

@@ -3,7 +3,7 @@ import {
   DownloadError,
   readResponseWithSizeLimit,
   DEFAULT_MAX_DOWNLOAD_SIZE,
-  fetchWithValidatedRedirects,
+  fetchUntrustedUrl,
   withUserAgentSuffix,
   getRuntimeEnvironmentUserAgent,
 } from '@ai-sdk/provider-utils';
@@ -36,7 +36,7 @@ export const download = async ({
       getRuntimeEnvironmentUserAgent(),
     );
 
-    const response = await fetchWithValidatedRedirects({
+    const response = await fetchUntrustedUrl({
       url: urlText,
       headers,
       abortSignal,