ai 7.0.83 → 7.0.84

package/dist/internal/index.js

@@ -92,7 +92,7 @@ import {
 } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "7.0.83" : "0.0.0-test";
+var VERSION = true ? "7.0.84" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({

package/docs/03-ai-sdk-harnesses/02-harness-agent.mdx

@@ -28,6 +28,7 @@ import { createVercelSandbox } from '@ai-sdk/sandbox-vercel';
 
 export const agent = new HarnessAgent({
   harness: claudeCode,
+  model: 'claude-sonnet-4-6',
   sandbox: createVercelSandbox({
     runtime: 'node24',
     ports: [4000],
@@ -40,6 +41,9 @@ export const agent = new HarnessAgent({
 Construct the agent at module scope. It holds configuration, not a live session.
 Live state belongs to `HarnessAgentSession`.
 
+Set `model` to select the model that the harness runtime uses. Model identifiers
+are specific to each harness. When omitted, the harness uses its default model.
+
 To use this agent, ensure environment variables with sandbox and harness credentials
 are set.
 
@@ -180,6 +184,73 @@ End every session explicitly:
 Use `destroy()` for one-off scripts and tests. Use `detach()` or `stop()` for
 HTTP routes that need multi-turn continuity.
 
+## Change Settings Between Turns
+
+Use `callOptionsSchema` and `prepareCall` to derive `skills`, `instructions`,
+and `tools` for each new turn. This follows the same call-options pattern as
+`ToolLoopAgent`:
+
+```ts
+import { HarnessAgent } from '@ai-sdk/harness/agent';
+import { tool } from 'ai';
+import { z } from 'zod';
+
+const getPolicy = tool({
+  description: 'Look up the active project policy.',
+  inputSchema: z.object({}),
+  execute: async () => 'Keep public APIs backward compatible.',
+});
+
+const agent = new HarnessAgent({
+  harness: claudeCode,
+  sandbox,
+  tools: { getPolicy },
+  callOptionsSchema: z.object({
+    area: z.enum(['frontend', 'backend']),
+    enablePolicyTool: z.boolean(),
+  }),
+  prepareCall: ({ options, ...call }) => ({
+    ...call,
+    instructions: `Work as the ${options.area} specialist.`,
+    skills: [options.area === 'frontend' ? frontendSkill : backendSkill],
+    tools: options.enablePolicyTool ? { getPolicy } : undefined,
+  }),
+});
+
+const session = await agent.createSession();
+try {
+  await agent.generate({
+    session,
+    prompt: 'Review the current implementation.',
+    options: { area: 'frontend', enablePolicyTool: false },
+  });
+
+  await agent.generate({
+    session,
+    prompt: 'Now review the API contract.',
+    options: { area: 'backend', enablePolicyTool: true },
+  });
+} finally {
+  await session.destroy();
+}
+```
+
+`prepareCall` runs for a new prompt after its custom `options` have been
+validated. Its settings are then fixed for that whole turn. If the turn pauses
+for a tool result, approval, stop condition, or process handoff, its
+continuation reuses the same settings and does not call `prepareCall` again.
+This prevents settings from changing mid-turn.
+
+The Codex adapter starts a fresh native Codex thread when its skills,
+instructions, or tool catalog changes because `codex exec resume` retains the
+original native thread bootstrap. The harness session remains usable, but prior
+native conversation context does not carry across that settings-change boundary.
+Turns with unchanged settings continue the existing native thread.
+
+Pass `abortSignal` directly to `generate()` or `stream()`; it is already a
+per-call setting and is not part of `prepareCall`. `output` also stays fixed on
+the agent because its response format is tied to the agent's output schema.
+
 When you pass `sandboxSession` to `agent.createSession()`, the caller retains
 ownership of that sandbox. `session.stop()` and `session.destroy()` still end
 the harness runtime but do not stop or destroy the supplied sandbox session.
@@ -418,10 +489,14 @@ console.log(preparation.identity);
 `HarnessAgent` accepts these main settings:
 
 - `harness`: the adapter instance.
+- `model`: optional harness-specific model identifier. When omitted, the
+  harness uses its default model.
 - `sandbox`: a `HarnessV1SandboxProvider`.
 - `id`: optional stable agent identifier.
 - `instructions`: instructions appended to the runtime's system or developer
-  prompt when supported, or prepended to the first user prompt otherwise.
+  prompt when supported, or prepended to the user prompt otherwise.
+- `callOptionsSchema` and `prepareCall`: validate custom call options and derive
+  skills, instructions, and tools for each new turn.
 - `output`: typed output specification applied to every turn.
 - `stopWhen`: condition(s) for finishing a result slice after a completed
   harness tool step that can continue into another model step.

package/docs/03-ai-sdk-harnesses/04-skills.mdx

@@ -8,8 +8,8 @@ description: Use skills with AI SDK harnesses.
 [Skills](https://agentskills.io/) are reusable instruction bundles that can
 be useful for project conventions, workflow guidance, domain-specific procedures,
 or any other instructions that should be discoverable by the underlying harness
-runtime. You can make skills available to a `HarnessAgent` for the lifetime of a
-session.
+runtime. You can configure skills for a `HarnessAgent` or replace them between
+completed turns.
 
 ## Define Skills
 
@@ -58,6 +58,10 @@ always being loaded into the agent's context like regular `instructions`.
 
 Use `instructions` for broad agent behavior and current-session priorities.
 
+Skills can be changed between completed turns using `callOptionsSchema` and
+`prepareCall`. See [Change Settings Between Turns](/docs/ai-sdk-harnesses/harness-agent#change-settings-between-turns)
+for details.
+
 ## Related
 
 - [HarnessAgent](/docs/ai-sdk-harnesses/harness-agent)

package/docs/07-reference/01-ai-sdk-core/02-stream-text.mdx

@@ -1708,6 +1708,13 @@ To see `streamText` in action, check out [these examples](#examples).
               description:
                 'The raw reason why the generation finished (from the provider).',
             },
+            {
+              name: 'output',
+              type: 'COMPLETE_OUTPUT | undefined',
+              isOptional: true,
+              description:
+                'The parsed output when an output setting was provided and parsing succeeded.',
+            },
             {
               name: 'usage',
               type: 'LanguageModelUsage',

package/docs/07-reference/01-ai-sdk-core/80-smooth-stream.mdx

@@ -45,7 +45,7 @@ const result = streamText({
       type: '"word" | "line" | RegExp | Intl.Segmenter | (buffer: string) => string | undefined | null',
       isOptional: true,
       description:
-        'Controls how text and reasoning content is chunked for streaming. Use "word" to stream word by word (default), "line" to stream line by line, an Intl.Segmenter for locale-aware word segmentation (recommended for CJK languages), or provide a custom callback or RegExp pattern for custom chunking.',
+        'Controls how text and reasoning content is chunked for streaming. Use "word" to stream word by word (default), "line" to stream line by line, an Intl.Segmenter for locale-aware word segmentation (recommended for CJK languages), or provide a custom callback or RegExp pattern that does not match the empty string for custom chunking.',
     },
   ]}
 />
@@ -102,7 +102,9 @@ const result = streamText({
 
 #### Regex based chunking
 
-To use regex based chunking, pass a `RegExp` to the `chunking` option.
+To use regex based chunking, pass a `RegExp` to the `chunking` option. Global
+and sticky expressions are supported. The expression must not match the empty
+string.
 
 ```ts
 // To split on underscores:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai",
-  "version": "7.0.83",
+  "version": "7.0.84",
   "type": "module",
   "description": "AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.",
   "license": "Apache-2.0",
@@ -42,21 +42,20 @@
     }
   },
   "dependencies": {
-    "@ai-sdk/gateway": "4.0.67",
+    "@ai-sdk/gateway": "4.0.68",
     "@ai-sdk/provider": "4.0.8",
-    "@ai-sdk/provider-utils": "5.0.32"
+    "@ai-sdk/provider-utils": "5.0.33"
   },
   "devDependencies": {
-    "@ai-sdk/amazon-bedrock": "5.0.66",
-    "@ai-sdk/deepseek": "3.0.35",
-    "@ai-sdk/google": "4.0.54",
-    "@ai-sdk/groq": "4.0.33",
-    "@ai-sdk/huggingface": "2.0.39",
-    "@ai-sdk/moonshotai": "3.0.41",
-    "@ai-sdk/open-responses": "2.0.34",
-    "@ai-sdk/openai": "4.0.50",
+    "@ai-sdk/amazon-bedrock": "5.0.67",
+    "@ai-sdk/deepseek": "3.0.36",
+    "@ai-sdk/google": "4.0.57",
+    "@ai-sdk/groq": "4.0.34",
+    "@ai-sdk/huggingface": "2.0.40",
+    "@ai-sdk/moonshotai": "3.0.42",
+    "@ai-sdk/openai": "4.0.51",
     "@ai-sdk/test-server": "2.0.1",
-    "@ai-sdk/xai": "4.0.47",
+    "@ai-sdk/xai": "4.0.49",
     "@edge-runtime/vm": "^5.0.0",
     "@smithy/eventstream-codec": "^4.3.3",
     "@smithy/util-utf8": "^4.3.3",

package/src/agent/tool-loop-agent-settings.ts

@@ -140,6 +140,13 @@ export type ToolLoopAgentSettings<
      */
     experimental_toolCallers?: Experimental_ToolCallers<NoInfer<TOOLS>>;
 
+    /**
+     * Secret for HMAC-signing tool approval requests. When set, the server
+     * signs each approval request at issuance and verifies the signature when
+     * the approval is replayed, preventing client-forged approvals.
+     */
+    experimental_toolApprovalSecret?: string | Uint8Array;
+
     /**
      * Optional function that you can use to provide different settings for a step.
      */
@@ -350,6 +357,7 @@ export type ToolLoopAgentSettings<
           | 'toolOrder'
           | 'toolApproval'
           | 'experimental_toolCallers'
+          | 'experimental_toolApprovalSecret'
           | 'prepareStep'
           | 'repairToolCall'
           | 'experimental_repairToolCall'
@@ -391,6 +399,7 @@ export type ToolLoopAgentSettings<
         | 'toolOrder'
         | 'toolApproval'
         | 'experimental_toolCallers'
+        | 'experimental_toolApprovalSecret'
         | 'prepareStep'
         | 'repairToolCall'
         | 'experimental_repairToolCall'

package/src/generate-text/index.ts

@@ -65,8 +65,10 @@ export {
 } from './stream-language-model-call';
 export {
   streamText,
+  type StreamTextEndEvent,
   type StreamTextInclude,
   type StreamTextOnChunkCallback,
+  type StreamTextOnEndCallback,
   type StreamTextOnErrorCallback,
   type StreamTextTransform,
 } from './stream-text';

package/src/generate-text/smooth-stream.ts

@@ -23,7 +23,7 @@ export type ChunkDetector = (buffer: string) => string | undefined | null;
  * Smooths text and reasoning streaming output.
  *
  * @param delayInMs - The delay in milliseconds between each chunk. Defaults to 10ms. Can be set to `null` to skip the delay.
- * @param chunking - Controls how the text is chunked for streaming. Use "word" to stream word by word (default), "line" to stream line by line, provide a custom RegExp pattern for custom chunking, provide an Intl.Segmenter for locale-aware word segmentation (recommended for CJK languages), or provide a custom ChunkDetector function.
+ * @param chunking - Controls how the text is chunked for streaming. Use "word" to stream word by word (default), "line" to stream line by line, provide a custom RegExp pattern that does not match the empty string for custom chunking, provide an Intl.Segmenter for locale-aware word segmentation (recommended for CJK languages), or provide a custom ChunkDetector function.
  *
  * @returns A transform stream that smooths text streaming output.
  */
@@ -95,13 +95,25 @@ export function smoothStream<TOOLS extends ToolSet>({
     }
 
     detectChunk = buffer => {
-      const match = chunkingRegex.exec(buffer);
+      const lastIndex = chunkingRegex.lastIndex;
+      chunkingRegex.lastIndex = 0;
+
+      let match: RegExpExecArray | null;
+      try {
+        match = chunkingRegex.exec(buffer);
+      } finally {
+        chunkingRegex.lastIndex = lastIndex;
+      }
 
       if (!match) {
         return null;
       }
 
-      return buffer.slice(0, match.index) + match?.[0];
+      if (!match[0].length) {
+        throw new Error(`Chunking RegExp must not match an empty string.`);
+      }
+
+      return buffer.slice(0, match.index) + match[0];
     };
   }
 

package/src/generate-text/stream-text.ts

@@ -95,7 +95,7 @@ import {
   type ActiveToolSubset,
 } from './filter-active-tools';
 import type {
-  GenerateTextOnEndCallback,
+  GenerateTextEndEvent,
   GenerateTextOnStartCallback,
   GenerateTextOnStepEndCallback,
   GenerateTextOnStepFinishCallback,
@@ -275,6 +275,24 @@ export type StreamTextOnChunkCallback<TOOLS extends ToolSet> = (event: {
   chunk: TextStreamPart<TOOLS>;
 }) => PromiseLike<void> | void;
 
+export type StreamTextEndEvent<
+  TOOLS extends ToolSet = ToolSet,
+  RUNTIME_CONTEXT extends Context = Context,
+  OUTPUT extends Output = Output,
+> = GenerateTextEndEvent<TOOLS, RUNTIME_CONTEXT> & {
+  /**
+   * The parsed output when an output setting was provided and parsing
+   * succeeded.
+   */
+  readonly output?: InferCompleteOutput<OUTPUT>;
+};
+
+export type StreamTextOnEndCallback<
+  TOOLS extends ToolSet = ToolSet,
+  RUNTIME_CONTEXT extends Context = Context,
+  OUTPUT extends Output = Output,
+> = Callback<StreamTextEndEvent<TOOLS, RUNTIME_CONTEXT, OUTPUT>>;
+
 /**
  * Callback that is set using the `onAbort` option.
  *
@@ -589,7 +607,11 @@ export function streamText<
      *
      * The usage is the combined usage of all steps.
      */
-    onEnd?: GenerateTextOnEndCallback<NoInfer<TOOLS>, NoInfer<RUNTIME_CONTEXT>>;
+    onEnd?: StreamTextOnEndCallback<
+      NoInfer<TOOLS>,
+      NoInfer<RUNTIME_CONTEXT>,
+      NoInfer<OUTPUT>
+    >;
 
     /**
      * Callback that is called when the LLM response and all request tool executions
@@ -599,9 +621,10 @@ export function streamText<
      *
      * @deprecated Use `onEnd` instead.
      */
-    onFinish?: GenerateTextOnEndCallback<
+    onFinish?: StreamTextOnEndCallback<
       NoInfer<TOOLS>,
-      NoInfer<RUNTIME_CONTEXT>
+      NoInfer<RUNTIME_CONTEXT>,
+      NoInfer<OUTPUT>
     >;
 
     onAbort?: StreamTextOnAbortCallback<
@@ -974,6 +997,8 @@ class DefaultStreamTextResult<
     Array<ResponseMessage>
   >();
 
+  private outputPromise: Promise<InferCompleteOutput<OUTPUT>> | undefined;
+
   private readonly addStream: (
     stream: ReadableStream<TextStreamPart<TOOLS>>,
     callbacks?: {
@@ -1095,7 +1120,11 @@ class DefaultStreamTextResult<
     onError: StreamTextOnErrorCallback;
     onEnd:
       | undefined
-      | GenerateTextOnEndCallback<NoInfer<TOOLS>, NoInfer<RUNTIME_CONTEXT>>;
+      | StreamTextOnEndCallback<
+          NoInfer<TOOLS>,
+          NoInfer<RUNTIME_CONTEXT>,
+          NoInfer<OUTPUT>
+        >;
     onAbort:
       | undefined
       | StreamTextOnAbortCallback<NoInfer<TOOLS>, NoInfer<RUNTIME_CONTEXT>>;
@@ -1486,43 +1515,65 @@ class DefaultStreamTextResult<
             step => step.dynamicToolResults,
           );
           const warnings = recordedSteps.flatMap(step => step.warnings ?? []);
+          const onEndWithOutput =
+            onEnd == null
+              ? undefined
+              : async (event: GenerateTextEndEvent<TOOLS, RUNTIME_CONTEXT>) => {
+                  const parsedOutput =
+                    output == null
+                      ? undefined
+                      : await self.getOutputPromise().catch(() => undefined);
+
+                  await onEnd({
+                    ...event,
+                    ...(output != null ? { output: parsedOutput } : {}),
+                  });
+                };
 
-          await notify({
-            event: {
-              callId,
-              toolsContext: finalStep.toolsContext,
-              stepNumber: finalStep.stepNumber,
-              model: finalStep.model,
-              runtimeContext: finalStep.runtimeContext,
-              finishReason: finalStep.finishReason,
-              rawFinishReason: finalStep.rawFinishReason,
-              usage: totalUsage,
-              totalUsage,
-              content,
-              text: finalStep.text,
-              reasoning: finalStep.reasoning,
-              reasoningText: finalStep.reasoningText,
-              files,
-              sources,
-              toolCalls,
-              staticToolCalls,
-              dynamicToolCalls,
-              toolResults,
-              staticToolResults,
-              dynamicToolResults,
-              responseMessages: [
-                ...initialResponseMessages,
-                ...recordedSteps.flatMap(step => step.response.messages),
-              ],
-              warnings,
-              request: finalStep.request,
-              response: finalStep.response,
-              providerMetadata: finalStep.providerMetadata,
-              steps: recordedSteps,
-              finalStep,
-            },
-            callbacks: [onEnd, telemetryDispatcher.onEnd],
-          });
+          const onEndEvent = {
+            callId,
+            toolsContext: finalStep.toolsContext,
+            stepNumber: finalStep.stepNumber,
+            model: finalStep.model,
+            runtimeContext: finalStep.runtimeContext,
+            finishReason: finalStep.finishReason,
+            rawFinishReason: finalStep.rawFinishReason,
+            usage: totalUsage,
+            totalUsage,
+            content,
+            text: finalStep.text,
+            reasoning: finalStep.reasoning,
+            reasoningText: finalStep.reasoningText,
+            files,
+            sources,
+            toolCalls,
+            staticToolCalls,
+            dynamicToolCalls,
+            toolResults,
+            staticToolResults,
+            dynamicToolResults,
+            responseMessages: [
+              ...initialResponseMessages,
+              ...recordedSteps.flatMap(step => step.response.messages),
+            ],
+            warnings,
+            request: finalStep.request,
+            response: finalStep.response,
+            providerMetadata: finalStep.providerMetadata,
+            steps: recordedSteps,
+            finalStep,
+          };
+
+          await Promise.all([
+            notify({
+              event: onEndEvent,
+              callbacks: onEndWithOutput,
+            }),
+            notify({
+              event: onEndEvent,
+              callbacks: telemetryDispatcher.onEnd,
+            }),
+          ]);
         } catch (error) {
           controller.error(error);
         }
@@ -2853,18 +2904,26 @@ class DefaultStreamTextResult<
     return createAsyncIterableStream(this.teeStream().pipeThrough(transform));
   }
 
+  private getOutputPromise(): Promise<InferCompleteOutput<OUTPUT>> {
+    if (this.outputPromise == null) {
+      this.outputPromise = this.finalStep.then(step => {
+        const output = this.outputSpecification ?? text();
+        return output.parseCompleteOutput(
+          { text: step.text },
+          {
+            response: step.response,
+            usage: step.usage,
+            finishReason: step.finishReason,
+          },
+        );
+      });
+    }
+
+    return this.outputPromise;
+  }
+
   get output(): Promise<InferCompleteOutput<OUTPUT>> {
-    return this.finalStep.then(step => {
-      const output = this.outputSpecification ?? text();
-      return output.parseCompleteOutput(
-        { text: step.text },
-        {
-          response: step.response,
-          usage: step.usage,
-          finishReason: step.finishReason,
-        },
-      );
-    });
+    return this.getOutputPromise();
   }
 
   toUIMessageStream<UI_MESSAGE extends UIMessage>({