ai 7.0.67 → 7.0.69

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # ai
 
+## 7.0.69
+
+### Patch Changes
+
+- Updated dependencies [1f7a464]
+  - @ai-sdk/gateway@4.0.55
+
+## 7.0.68
+
+### Patch Changes
+
+- Updated dependencies [257632b]
+  - @ai-sdk/gateway@4.0.54
+
 ## 7.0.67
 
 ### Patch Changes

package/dist/index.js

@@ -1143,7 +1143,7 @@ import {
 } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "7.0.67" : "0.0.0-test";
+var VERSION = true ? "7.0.69" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/dist/internal/index.js

@@ -92,7 +92,7 @@ import {
 } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "7.0.67" : "0.0.0-test";
+var VERSION = true ? "7.0.69" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/docs/02-foundations/02-providers-and-models.mdx

@@ -97,6 +97,7 @@ The open-source community has created the following providers:
 - [ZeroEntropy Provider](/providers/community-providers/zeroentropy) (`zeroentropy-ai-provider`)
 - [Crusoe Provider](/providers/community-providers/crusoe) (`crusoe-ai-provider`)
 - [Neon AI Gateway Provider](/providers/community-providers/neon-ai-gateway) (`@neon/ai-sdk-provider`)
+- [Interfaze Provider](/providers/community-providers/interfaze) (`@interfaze-ai/ai-sdk`)
 
 ## Self-Hosted Models
 

package/docs/03-ai-sdk-core/16-mcp-tools.mdx

@@ -25,6 +25,12 @@ Create an MCP client using one of the following transport options:
 - SSE (Server-Sent Events): An alternative HTTP-based transport
 - `stdio`: For local development only. Uses standard input/output streams for local MCP servers
 
+The AI SDK MCP client supports both legacy initialization-based protocol
+versions and stateless MCP `2026-07-28`. The built-in stdio transport probes
+with `server/discover` and automatically falls back to the legacy
+`initialize` handshake for older servers. Custom transports can opt into this
+negotiation with `supportsProtocolVersionDiscovery: true`.
+
 ### HTTP Transport (Recommended)
 
 For production deployments, we recommend using the HTTP transport. You can configure it directly on the client:
@@ -49,8 +55,9 @@ const mcpClient = await createMCPClient({
 });
 ```
 
-If the MCP server uses Streamable HTTP sessions, you can reattach to a saved
-session by restoring both the previous session id and initialize result:
+If a legacy MCP server uses Streamable HTTP sessions, you can reattach to a
+saved session by restoring both the previous session id and initialize result.
+MCP `2026-07-28` is stateless and does not use these options:
 
 ```typescript
 import { createMCPClient } from '@ai-sdk/mcp';
@@ -203,6 +210,32 @@ This hook is called before the SDK fetches authorization server metadata, so a
 rejected URL is not requested. It is optional and does not change existing OAuth
 flows unless you implement it.
 
+### OAuth Callback Issuer Validation
+
+When completing an OAuth authorization callback, pass the callback's `iss`
+parameter to `auth` as `callbackIssuer`:
+
+```typescript
+import { auth } from '@ai-sdk/mcp';
+
+const callbackUrl = new URL(request.url);
+
+await auth(myOAuthClientProvider, {
+  serverUrl: 'https://mcp.example.com',
+  authorizationCode: callbackUrl.searchParams.get('code')!,
+  callbackState: callbackUrl.searchParams.get('state') ?? undefined,
+  callbackIssuer: callbackUrl.searchParams.get('iss') ?? undefined,
+});
+```
+
+When `iss` is present, it must exactly match the discovered authorization
+server issuer. The authorization code is not exchanged when it does not match.
+
+Dynamic client registration requests include an OAuth `application_type`. The
+client infers `native` for loopback, localhost, and custom-scheme redirects,
+and `web` for remote HTTP(S) redirects. You can override this by setting
+`application_type` in the provider's `clientMetadata`.
+
 ### Retrying Transient Tool Failures
 
 MCP tool calls can fail for transient transport reasons, such as rate limits,

package/docs/03-ai-sdk-core/38-video-generation.mdx

@@ -466,21 +466,22 @@ try {
 
 ## Video Models
 
-| Provider                                                                | Model                       | Features                                                                      |
-| ----------------------------------------------------------------------- | --------------------------- | ----------------------------------------------------------------------------- |
-| [FAL](/providers/ai-sdk-providers/fal#video-models)                     | `luma-dream-machine/ray-2`  | Text-to-video, image-to-video                                                 |
-| [FAL](/providers/ai-sdk-providers/fal#video-models)                     | `minimax-video`             | Text-to-video                                                                 |
-| [Google](/providers/ai-sdk-providers/google#video-models)               | `veo-2.0-generate-001`      | Text-to-video, up to 4 videos per call                                        |
-| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models) | `veo-3.1-generate-001`      | Text-to-video, audio generation                                               |
-| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models) | `veo-3.1-fast-generate-001` | Text-to-video, audio generation                                               |
-| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models) | `veo-3.0-generate-001`      | Text-to-video, audio generation                                               |
-| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models) | `veo-3.0-fast-generate-001` | Text-to-video, audio generation                                               |
-| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models) | `veo-2.0-generate-001`      | Text-to-video, up to 4 videos per call                                        |
-| [Kling AI](/providers/ai-sdk-providers/klingai#video-models)            | `kling-v2.6-t2v`            | Text-to-video                                                                 |
-| [Kling AI](/providers/ai-sdk-providers/klingai#video-models)            | `kling-v2.6-i2v`            | Image-to-video                                                                |
-| [Kling AI](/providers/ai-sdk-providers/klingai#video-models)            | `kling-v2.6-motion-control` | Motion control                                                                |
-| [Replicate](/providers/ai-sdk-providers/replicate#video-models)         | `minimax/video-01`          | Text-to-video                                                                 |
-| [xAI](/providers/ai-sdk-providers/xai#video-models)                     | `grok-imagine-video`        | Text-to-video, image-to-video, editing, extension, R2V                        |
-| [xAI](/providers/ai-sdk-providers/xai#video-models)                     | `grok-imagine-video-1.5`    | Text-to-video, image-to-video, editing, extension, R2V (with reference audio) |
+| Provider                                                                        | Model                       | Features                                                                       |
+| ------------------------------------------------------------------------------- | --------------------------- | ------------------------------------------------------------------------------ |
+| [Black Forest Labs](/providers/ai-sdk-providers/black-forest-labs#video-models) | `flux-3-video`              | Text-to-video, image-to-video, keyframes, video continuation, audio generation |
+| [FAL](/providers/ai-sdk-providers/fal#video-models)                             | `luma-dream-machine/ray-2`  | Text-to-video, image-to-video                                                  |
+| [FAL](/providers/ai-sdk-providers/fal#video-models)                             | `minimax-video`             | Text-to-video                                                                  |
+| [Google](/providers/ai-sdk-providers/google#video-models)                       | `veo-2.0-generate-001`      | Text-to-video, up to 4 videos per call                                         |
+| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models)         | `veo-3.1-generate-001`      | Text-to-video, audio generation                                                |
+| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models)         | `veo-3.1-fast-generate-001` | Text-to-video, audio generation                                                |
+| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models)         | `veo-3.0-generate-001`      | Text-to-video, audio generation                                                |
+| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models)         | `veo-3.0-fast-generate-001` | Text-to-video, audio generation                                                |
+| [Google Vertex](/providers/ai-sdk-providers/google-vertex#video-models)         | `veo-2.0-generate-001`      | Text-to-video, up to 4 videos per call                                         |
+| [Kling AI](/providers/ai-sdk-providers/klingai#video-models)                    | `kling-v2.6-t2v`            | Text-to-video                                                                  |
+| [Kling AI](/providers/ai-sdk-providers/klingai#video-models)                    | `kling-v2.6-i2v`            | Image-to-video                                                                 |
+| [Kling AI](/providers/ai-sdk-providers/klingai#video-models)                    | `kling-v2.6-motion-control` | Motion control                                                                 |
+| [Replicate](/providers/ai-sdk-providers/replicate#video-models)                 | `minimax/video-01`          | Text-to-video                                                                  |
+| [xAI](/providers/ai-sdk-providers/xai#video-models)                             | `grok-imagine-video`        | Text-to-video, image-to-video, editing, extension, R2V                         |
+| [xAI](/providers/ai-sdk-providers/xai#video-models)                             | `grok-imagine-video-1.5`    | Text-to-video, image-to-video, editing, extension, R2V (with reference audio)  |
 
 Above are a small subset of the video models supported by the AI SDK providers. For more, see the respective provider documentation.

package/docs/03-ai-sdk-harnesses/02-harness-agent.mdx

@@ -180,6 +180,11 @@ End every session explicitly:
 Use `destroy()` for one-off scripts and tests. Use `detach()` or `stop()` for
 HTTP routes that need multi-turn continuity.
 
+When you pass `sandboxSession` to `agent.createSession()`, the caller retains
+ownership of that sandbox. `session.stop()` and `session.destroy()` still end
+the harness runtime but do not stop or destroy the supplied sandbox session.
+In this case, the agent does not need a `sandbox` provider in its constructor.
+
 ```ts
 const session = await agent.createSession({ sessionId: chatId });
 
@@ -401,10 +406,7 @@ const sandboxFromSnapshot = await Sandbox.create({
 
 const agent = new HarnessAgent({
   harness: claudeCode,
-  sandbox: createVercelSandbox({
-    sandbox: sandboxFromSnapshot,
-    bridgePorts: [4000],
-  }),
+  sandbox: createVercelSandbox({ sandbox: sandboxFromSnapshot }),
   sandboxConfig,
 });
 
@@ -437,6 +439,51 @@ console.log(preparation.identity);
 Adapter-specific settings belong on the adapter factory, for example
 `createCodex({ reasoningEffort: 'high' })`.
 
+## Custom Sandbox Orchestration
+
+When your application creates and manages sandboxes itself, prepare the network
+sandbox session first and then pass that same session to `agent.createSession()`.
+The agent does not need a sandbox provider and does not stop or destroy the
+caller-owned sandbox.
+
+```ts
+import { HarnessAgent, prepareSandboxForHarness } from '@ai-sdk/harness/agent';
+import { claudeCode } from '@ai-sdk/harness-claude-code';
+import { createVercelSandbox } from '@ai-sdk/sandbox-vercel';
+import { Sandbox } from '@vercel/sandbox';
+
+const sandbox = await Sandbox.create({
+  runtime: 'node24',
+  ports: [4000],
+});
+const sandboxProvider = createVercelSandbox({ sandbox });
+const sandboxSession = await sandboxProvider.createSession();
+
+await prepareSandboxForHarness({
+  session: sandboxSession.restricted(),
+  harnesses: [claudeCode],
+});
+
+const agent = new HarnessAgent({ harness: claudeCode });
+const session = await agent.createSession({ sandboxSession });
+
+try {
+  const result = await agent.stream({
+    session,
+    prompt: 'Create a short TODO.md for this repository.',
+  });
+
+  for await (const part of result.stream) {
+    if (part.type === 'text-delta') {
+      process.stdout.write(part.text);
+    }
+  }
+} finally {
+  await session.destroy();
+  await sandbox.stop();
+}
+```
+
 ## Next Steps
 
 - [Tools](/docs/ai-sdk-harnesses/tools) for built-in and host-executed tools.

package/docs/07-reference/01-ai-sdk-core/23-create-mcp-client.mdx

@@ -121,14 +121,14 @@ It currently does not support accepting notifications from an MCP server, and cu
                       type: 'string',
                       isOptional: true,
                       description:
-                        'Initial MCP session id to send with resumed Streamable HTTP requests after initialization. Pair with initialInitializeResult when using createMCPClient. Only used by the HTTP transport.',
+                        'Initial legacy MCP session id to send with resumed Streamable HTTP requests after initialization. Pair with initialInitializeResult when using createMCPClient. Only used by the HTTP transport and initialization-based protocol versions.',
                     },
                     {
                       name: 'initialProtocolVersion',
                       type: 'string',
                       isOptional: true,
                       description:
-                        'Initial MCP protocol version to send before initialize negotiates one. Only used by the HTTP transport.',
+                        'Initial legacy MCP protocol version to send before initialize negotiates one. Only used by the HTTP transport.',
                     },
                     {
                       name: 'onSessionIdChange',
@@ -167,7 +167,7 @@ It currently does not support accepting notifications from an MCP server, and cu
               type: 'RequestOptions',
               isOptional: true,
               description:
-                'Optional signal and timeout settings that bound transport startup and the initialize request. A timeout or abort closes the transport and rejects createMCPClient.',
+                'Optional signal and timeout settings that bound transport startup and protocol negotiation. A timeout or abort closes the transport and rejects createMCPClient.',
             },
             {
               name: 'clientName',
@@ -206,14 +206,14 @@ It currently does not support accepting notifications from an MCP server, and cu
               type: 'InitializeResult',
               isOptional: true,
               description:
-                'Initialize result from a previous MCP session. When provided, the client starts the transport and reuses this metadata without sending a new initialize request.',
+                'Initialize result from a previous legacy MCP session. When provided, the client starts the transport and reuses this metadata without sending a new initialize request.',
             },
             {
               name: 'capabilities',
               type: 'ClientCapabilities',
               isOptional: true,
               description:
-                'Optional client capabilities to advertise during initialization. For example, set { elicitation: {} } to enable handling elicitation requests from the server.',
+                'Optional client capabilities to advertise during legacy initialization or on each stateless modern request. For example, set { elicitation: {} } to enable handling elicitation requests from the server.',
             },
           ],
         },
@@ -232,13 +232,13 @@ Returns a Promise that resolves to an `MCPClient` with the following properties
       name: 'initializeResult',
       type: 'InitializeResult',
       description:
-        'The full initialize result used by this client, either from the server during initialization or from initialInitializeResult.',
+        'Connection metadata used by this client. For legacy servers this is the initialize result; for modern servers an equivalent value is derived from protocol discovery.',
     },
     {
       name: 'serverInfo',
       type: 'Configuration',
       description:
-        'Information about the connected MCP server (name, version, optional title), as reported during the initialize handshake.',
+        'Information about the connected MCP server (name, version, optional title), as reported during initialization or protocol discovery.',
     },
     {
       name: 'instructions',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai",
-  "version": "7.0.67",
+  "version": "7.0.69",
   "type": "module",
   "description": "AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.",
   "license": "Apache-2.0",
@@ -42,7 +42,7 @@
     }
   },
   "dependencies": {
-    "@ai-sdk/gateway": "4.0.53",
+    "@ai-sdk/gateway": "4.0.55",
     "@ai-sdk/provider": "4.0.7",
     "@ai-sdk/provider-utils": "5.0.27"
   },