ai 7.0.34 → 7.0.36

package/dist/internal/index.d.ts

@@ -421,13 +421,15 @@ type LanguageModelCallOptions = {
  * - A number representing milliseconds
  * - An object with `totalMs` property for the total timeout in milliseconds
  * - An object with `stepMs` property for the timeout of each step in milliseconds
- * - An object with `chunkMs` property for the timeout between stream chunks (streaming only)
+ * - An object with `firstChunkMs` property for the timeout until the first content chunk of each step (streaming only)
+ * - An object with `chunkMs` property for the timeout between content chunks (streaming only)
  * - An object with `toolMs` property for the default timeout for all tool executions
  * - An object with `tools` property for per-tool timeout overrides using `{toolName}Ms` keys
  */
 type TimeoutConfiguration<TOOLS extends ToolSet> = number | {
     totalMs?: number;
     stepMs?: number;
+    firstChunkMs?: number;
     chunkMs?: number;
     toolMs?: number;
     tools?: Partial<Record<`${keyof TOOLS & string}Ms`, number>>;
@@ -1965,7 +1967,8 @@ type GenerateTextStartEvent<TOOLS extends ToolSet = ToolSet, RUNTIME_CONTEXT ext
     readonly maxRetries: number;
     /**
      * Timeout configuration for the generation.
-     * Can be a number (milliseconds) or an object with totalMs, stepMs, chunkMs, toolMs, and per-tool overrides via tools.
+     * Can be a number (milliseconds) or an object with totalMs, stepMs,
+     * firstChunkMs (streaming only), chunkMs, toolMs, and per-tool overrides via tools.
      */
     readonly timeout: TimeoutConfiguration<TOOLS> | undefined;
     /** Additional HTTP headers sent with the request. */

package/dist/internal/index.js

@@ -85,7 +85,7 @@ import {
 } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "7.0.34" : "0.0.0-test";
+var VERSION = true ? "7.0.36" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({
@@ -3281,6 +3281,17 @@ async function importKey(secret) {
   );
 }
 function buildPayload(approvalId, toolCallId, toolName, inputDigest) {
+  return encoder2.encode(
+    JSON.stringify([
+      "ai-sdk-tool-approval-v1",
+      approvalId,
+      toolCallId,
+      toolName,
+      inputDigest
+    ])
+  );
+}
+function buildLegacyPayload(approvalId, toolCallId, toolName, inputDigest) {
   return encoder2.encode(
     `${approvalId}
 ${toolCallId}
@@ -3298,9 +3309,21 @@ async function verifyToolApprovalSignature({
 }) {
   const key = await importKey(secret);
   const inputDigest = await hashCanonical(input);
-  const payload = buildPayload(approvalId, toolCallId, toolName, inputDigest);
   const sigBytes = fromBase64url(signature);
-  return crypto.subtle.verify("HMAC", key, sigBytes, payload);
+  const payload = buildPayload(approvalId, toolCallId, toolName, inputDigest);
+  if (await crypto.subtle.verify("HMAC", key, sigBytes, payload)) {
+    return true;
+  }
+  if (!approvalId.includes("\n") && !toolCallId.includes("\n") && !toolName.includes("\n")) {
+    const legacyPayload = buildLegacyPayload(
+      approvalId,
+      toolCallId,
+      toolName,
+      inputDigest
+    );
+    return crypto.subtle.verify("HMAC", key, sigBytes, legacyPayload);
+  }
+  return false;
 }
 
 // src/generate-text/validate-tool-approvals.ts