ai 7.0.35 → 7.0.37

package/docs/02-foundations/02-providers-and-models.mdx

@@ -95,6 +95,7 @@ The open-source community has created the following providers:
 - [Zhipu (Z.AI) Provider](/providers/community-providers/zhipu) (`zhipu-ai-provider`)
 - [OLLM Provider](/providers/community-providers/ollm) (`@ofoundation/ollm`)
 - [ZeroEntropy Provider](/providers/community-providers/zeroentropy) (`zeroentropy-ai-provider`)
+- [Neon AI Gateway Provider](/providers/community-providers/neon-ai-gateway) (`@neon/ai-sdk-provider`)
 
 ## Self-Hosted Models
 

package/docs/04-ai-sdk-ui/03-chatbot-tool-usage.mdx

@@ -128,6 +128,11 @@ There are three things worth mentioning:
    It asks the user for confirmation and displays the result once the user confirms or denies the execution.
    The result is added to the chat using `addToolOutput` with the `tool` parameter for type safety.
 
+Typed tool parts also include the `approval-requested`, `approval-responded`,
+and `output-denied` states. Include these states when handling `part.state`
+exhaustively, even when a tool does not require approval. See
+[Tool execution approval](#tool-execution-approval) for a complete approval UI.
+
 ```tsx filename='app/page.tsx' highlight="6,11,16,19-23,25-26,28-33,51,66-70,77-81"
 'use client';
 
@@ -217,6 +222,10 @@ export default function Chat() {
                         </div>
                       </div>
                     );
+                  case 'approval-requested':
+                    return <div key={callId}>Approval requested.</div>;
+                  case 'approval-responded':
+                    return <div key={callId}>Approval response received.</div>;
                   case 'output-available':
                     return (
                       <div key={callId}>
@@ -225,6 +234,8 @@ export default function Chat() {
                     );
                   case 'output-error':
                     return <div key={callId}>Error: {part.errorText}</div>;
+                  case 'output-denied':
+                    return <div key={callId}>Tool call denied.</div>;
                 }
                 break;
               }
@@ -239,6 +250,10 @@ export default function Chat() {
                     );
                   case 'input-available':
                     return <div key={callId}>Getting location...</div>;
+                  case 'approval-requested':
+                    return <div key={callId}>Approval requested.</div>;
+                  case 'approval-responded':
+                    return <div key={callId}>Approval response received.</div>;
                   case 'output-available':
                     return <div key={callId}>Location: {part.output}</div>;
                   case 'output-error':
@@ -247,6 +262,8 @@ export default function Chat() {
                         Error getting location: {part.errorText}
                       </div>
                     );
+                  case 'output-denied':
+                    return <div key={callId}>Location request denied.</div>;
                 }
                 break;
               }
@@ -266,6 +283,10 @@ export default function Chat() {
                         Getting weather information for {part.input.city}...
                       </div>
                     );
+                  case 'approval-requested':
+                    return <div key={callId}>Approval requested.</div>;
+                  case 'approval-responded':
+                    return <div key={callId}>Approval response received.</div>;
                   case 'output-available':
                     return (
                       <div key={callId}>
@@ -279,6 +300,8 @@ export default function Chat() {
                         {part.errorText}
                       </div>
                     );
+                  case 'output-denied':
+                    return <div key={callId}>Weather request denied.</div>;
                 }
                 break;
               }
@@ -631,10 +654,16 @@ export default function Chat() {
                     return <pre>{JSON.stringify(part.input, null, 2)}</pre>;
                   case 'input-available':
                     return <pre>{JSON.stringify(part.input, null, 2)}</pre>;
+                  case 'approval-requested':
+                    return <div>Approval requested.</div>;
+                  case 'approval-responded':
+                    return <div>Approval response received.</div>;
                   case 'output-available':
                     return <pre>{JSON.stringify(part.output, null, 2)}</pre>;
                   case 'output-error':
                     return <div>Error: {part.errorText}</div>;
+                  case 'output-denied':
+                    return <div>Tool call denied.</div>;
                 }
             }
           })}

package/docs/04-ai-sdk-ui/21-error-handling.mdx

@@ -111,11 +111,13 @@ export default function Chat() {
 }
 ```
 
-#### Alternative: replace last message
+#### Alternative: replace the failed message
 
-Alternatively you can write a custom submit handler that replaces the last message when an error is present.
+Alternatively, you can write a custom submit handler that replaces the failed
+user message with new input. If the assistant response started streaming before
+the error, remove both the partial assistant response and its user message.
 
-```tsx file="app/page.tsx" highlight="13-15,17-18,35"
+```tsx file="app/page.tsx" highlight="13-19,21-22,39"
 'use client';
 
 import { useChat } from '@ai-sdk/react';
@@ -129,7 +131,11 @@ export default function Chat() {
     event.preventDefault();
 
     if (error != null) {
-      setMessages(messages.slice(0, -1)); // remove last message
+      setMessages(messages =>
+        messages.at(-1)?.role === 'assistant'
+          ? messages.slice(0, -2)
+          : messages.slice(0, -1),
+      );
     }
 
     sendMessage({ text: input });

package/docs/08-migration-guides/24-migration-guide-6-0.mdx

@@ -525,6 +525,34 @@ The `unknown` finish reason has been removed. It is now returned as `other`.
 
 ## AI SDK UI
 
+### Tool UI Part Approval States
+
+AI SDK 6 adds `approval-requested`, `approval-responded`, and `output-denied`
+to the tool UI part `state` union. Update exhaustive `switch` statements and
+other state handling to cover the three approval states.
+
+```tsx filename="AI SDK 6"
+switch (part.state) {
+  case 'input-streaming':
+    return 'Loading input';
+  case 'input-available':
+    return 'Input ready';
+  case 'approval-requested':
+    return 'Approval requested';
+  case 'approval-responded':
+    return 'Approval response received';
+  case 'output-available':
+    return 'Output ready';
+  case 'output-error':
+    return part.errorText;
+  case 'output-denied':
+    return 'Tool call denied';
+}
+```
+
+See [Tool execution approval](/docs/ai-sdk-ui/chatbot-tool-usage#tool-execution-approval)
+for handling approval requests and responses in a chat UI.
+
 ### Tool UI Part Helper Functions Rename
 
 The tool UI part helper functions have been renamed to better reflect their purpose and to accommodate both static and dynamic tool parts ([PR #XXXX](https://github.com/vercel/ai/pull/XXXX)).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai",
-  "version": "7.0.35",
+  "version": "7.0.37",
   "type": "module",
   "description": "AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.",
   "license": "Apache-2.0",
@@ -42,7 +42,7 @@
     }
   },
   "dependencies": {
-    "@ai-sdk/gateway": "4.0.27",
+    "@ai-sdk/gateway": "4.0.28",
     "@ai-sdk/provider": "4.0.3",
     "@ai-sdk/provider-utils": "5.0.12"
   },

package/src/generate-text/tool-approval-signature.ts

@@ -18,11 +18,37 @@ async function importKey(secret: string | Uint8Array): Promise<CryptoKey> {
   );
 }
 
+// Serialize with JSON so the encoding is injective: fields may contain any
+// character (including newlines), and escaping + array structure keeps field
+// boundaries unambiguous. The version prefix provides domain separation.
 function buildPayload(
   approvalId: string,
   toolCallId: string,
   toolName: string,
   inputDigest: string,
+): Uint8Array {
+  return encoder.encode(
+    JSON.stringify([
+      'ai-sdk-tool-approval-v1',
+      approvalId,
+      toolCallId,
+      toolName,
+      inputDigest,
+    ]),
+  );
+}
+
+// Legacy newline-joined payload. Ambiguous when any field contains the `\n`
+// delimiter, which is why it was replaced; only used as a verify-time fallback
+// guarded on delimiter-free fields.
+// TODO(#17494): remove in v8 when backwards compatibility with pre-JSON
+// signatures (approvals signed before the injective format) is no longer
+// needed.
+function buildLegacyPayload(
+  approvalId: string,
+  toolCallId: string,
+  toolName: string,
+  inputDigest: string,
 ): Uint8Array {
   return encoder.encode(
     `${approvalId}\n${toolCallId}\n${toolName}\n${inputDigest}`,
@@ -66,9 +92,35 @@ export async function verifyToolApprovalSignature({
 }): Promise<boolean> {
   const key = await importKey(secret);
   const inputDigest = await hashCanonical(input);
-  const payload = buildPayload(approvalId, toolCallId, toolName, inputDigest);
   const sigBytes = fromBase64url(signature);
-  return crypto.subtle.verify('HMAC', key, sigBytes, payload);
+
+  const payload = buildPayload(approvalId, toolCallId, toolName, inputDigest);
+  if (await crypto.subtle.verify('HMAC', key, sigBytes, payload)) {
+    return true;
+  }
+
+  // Backwards compatibility: accept a signature produced by the legacy
+  // newline-joined format, but only when no field contains the `\n` delimiter
+  // — the exact condition that made that format ambiguous. This keeps the
+  // retupling collision closed (the attack requires a newline in a field)
+  // while still verifying benign approvals signed by an older version, e.g. a
+  // pending approval that straddles an upgrade.
+  // TODO(#17494): remove in v8 (drop buildLegacyPayload and this fallback).
+  if (
+    !approvalId.includes('\n') &&
+    !toolCallId.includes('\n') &&
+    !toolName.includes('\n')
+  ) {
+    const legacyPayload = buildLegacyPayload(
+      approvalId,
+      toolCallId,
+      toolName,
+      inputDigest,
+    );
+    return crypto.subtle.verify('HMAC', key, sigBytes, legacyPayload);
+  }
+
+  return false;
 }
 
 export async function maybeSignApproval({