gitlab-ai-provider 5.3.3 → 6.1.0

package/CHANGELOG.md

@@ -2,6 +2,37 @@
 
 All notable changes to this project will be documented in this file. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## 6.1.0 (2026-03-29)
+
+- fix(approval): defer stream close while approval is pending and send rejection to DWS ([9344828](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/9344828))
+- feat(client): emit approval-required event for TOOL_CALL_APPROVAL_REQUIRED checkpoints ([500eff1](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/500eff1))
+- feat(model): add approveAndResume, sessionPreapprovedTools, processedRequestIDs dedup ([f543831](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/f543831))
+- feat(model): add public approvalHandler getter/setter for external wiring ([ee075b9](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/ee075b9))
+- feat(options): add agentPrivileges to GitLabWorkflowOptions for testing approval flow ([475f2c7](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/475f2c7))
+- feat(types): add ApprovalDecision, approval on StartRequest, approval-required event ([9a4ccf4](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/9a4ccf4))
+- chore: rebuild dist with approval integration changes ([d66deb9](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/d66deb9))
+- chore: rebuild dist with approval integration changes ([daacc33](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/daacc33))
+
+## 6.0.0 (2026-03-26)
+
+- feat!: migrate to AI SDK v6 (LanguageModelV3) ([21c1165](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/21c1165))
+- Merge branch 'ai-sdk-v6' into 'main' ([a527717](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/a527717)), closes [#3](https://gitlab.com/vglafirov/gitlab-ai-provider/issues/3)
+- chore: add .worktrees to .gitignore ([a7df2fb](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/a7df2fb))
+
+### BREAKING CHANGE
+
+- This release migrates the provider to AI SDK v6 which
+  requires @ai-sdk/provider-utils v4+ and uses the LanguageModelV3 interface.
+  Consumers must upgrade to AI SDK v6 compatible tooling.
+
+* Migrate models and provider to LanguageModelV3 for AI SDK v6
+* Add AI SDK v6 support with updated streaming and tool-call handling
+* Fix streaming tool-call handling and normalize v3 tool-result output
+* Fix per-tool strict mode in OpenAI responses
+* Fix unknown finish reason mapping for v6 compatibility
+* Fix cache and add v3 contract tests
+* Rebuild dist
+
 ## <small>5.3.3 (2026-03-25)</small>
 
 - Merge branch 'vg/tools-fix' into 'main' ([d33e8c0](https://gitlab.com/vglafirov/gitlab-ai-provider/commit/d33e8c0))

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { LanguageModelV2, LanguageModelV2CallOptions, LanguageModelV2Content, LanguageModelV2FinishReason, LanguageModelV2Usage, LanguageModelV2CallWarning, LanguageModelV2StreamPart } from '@ai-sdk/provider';
+import { LanguageModelV3, LanguageModelV3CallOptions, LanguageModelV3GenerateResult, LanguageModelV3StreamResult, LanguageModelV3Content, LanguageModelV3FinishReason, LanguageModelV3Usage, LanguageModelV3StreamPart } from '@ai-sdk/provider';
 import { z } from 'zod';
 
 interface GitLabAnthropicConfig {
@@ -47,8 +47,8 @@ interface GitLabAnthropicConfig {
  * for the duo-chat model. It connects to Claude through GitLab's cloud proxy
  * at https://cloud.gitlab.com/ai/v1/proxy/anthropic/
  */
-declare class GitLabAnthropicLanguageModel implements LanguageModelV2 {
-    readonly specificationVersion: "v2";
+declare class GitLabAnthropicLanguageModel implements LanguageModelV3 {
+    readonly specificationVersion: "v3";
     readonly modelId: string;
     readonly supportedUrls: Record<string, RegExp[]>;
     private readonly config;
@@ -86,22 +86,10 @@ declare class GitLabAnthropicLanguageModel implements LanguageModelV2 {
      * Convert Anthropic finish reason to AI SDK format
      */
     private convertFinishReason;
-    doGenerate(options: LanguageModelV2CallOptions): Promise<{
-        content: LanguageModelV2Content[];
-        finishReason: LanguageModelV2FinishReason;
-        usage: LanguageModelV2Usage;
-        warnings: LanguageModelV2CallWarning[];
-    }>;
+    private createUsage;
+    doGenerate(options: LanguageModelV3CallOptions): Promise<LanguageModelV3GenerateResult>;
     private doGenerateWithRetry;
-    doStream(options: LanguageModelV2CallOptions): Promise<{
-        stream: ReadableStream<LanguageModelV2StreamPart>;
-        request?: {
-            body?: unknown;
-        };
-        response?: {
-            headers?: Record<string, string>;
-        };
-    }>;
+    doStream(options: LanguageModelV3CallOptions): Promise<LanguageModelV3StreamResult>;
     private doStreamWithRetry;
 }
 
@@ -358,6 +346,17 @@ interface StartRequest {
     preapproved_tools?: string[];
     flowConfig?: unknown;
     flowConfigSchemaVersion?: string;
+    approval?: ApprovalDecision;
+}
+interface ApprovalDecision {
+    approval?: {
+        remember_approval?: boolean;
+        tool_name?: string;
+        tool_args_json?: string;
+    };
+    rejection?: {
+        message?: string;
+    };
 }
 interface ActionResponsePayload {
     requestID: string;
@@ -563,6 +562,25 @@ interface GitLabWorkflowOptions {
      * @returns The selected model ref, or null/undefined for default
      */
     onSelectModel?: (models: AiModel[]) => Promise<string | null | undefined>;
+    /**
+     * Agent privileges to request when creating the workflow.
+     * Defaults to DEFAULT_AGENT_PRIVILEGES (all privileges).
+     * Pass a subset to restrict which tools DWS pre-approves server-side,
+     * causing TOOL_CALL_APPROVAL_REQUIRED for excluded privileges.
+     */
+    agentPrivileges?: number[];
+    /**
+     * Called when DWS requires approval for a tool call.
+     * Return `{ approved: true }` to proceed or `{ approved: false, message? }` to reject.
+     * If not set, the stream ends silently when approval is required (backward compat).
+     */
+    approvalHandler?: (tools: Array<{
+        name: string;
+        args: string;
+    }>) => Promise<{
+        approved: boolean;
+        message?: string;
+    }>;
 }
 interface GitLabWorkflowClientConfig {
     /** GitLab instance URL (e.g., 'https://gitlab.com') */
@@ -596,6 +614,12 @@ type WorkflowClientEvent = {
     requestID: string;
     toolName: string;
     data: Record<string, unknown>;
+} | {
+    type: 'approval-required';
+    tools: Array<{
+        name: string;
+        args: string;
+    }>;
 } | {
     type: 'completed';
 } | {
@@ -665,11 +689,11 @@ type WorkflowToolExecutor = (toolName: string, args: string, requestID: string)
 /**
  * GitLab Duo Agent Platform Language Model.
  *
- * Implements LanguageModelV2 by bridging the DWS WebSocket protocol
+ * Implements LanguageModelV3 by bridging the DWS WebSocket protocol
  * to the Vercel AI SDK stream part format.
  */
-declare class GitLabWorkflowLanguageModel implements LanguageModelV2 {
-    readonly specificationVersion: "v2";
+declare class GitLabWorkflowLanguageModel implements LanguageModelV3 {
+    readonly specificationVersion: "v3";
     readonly modelId: string;
     readonly supportedUrls: Record<string, RegExp[]>;
     private readonly config;
@@ -725,6 +749,31 @@ declare class GitLabWorkflowLanguageModel implements LanguageModelV2 {
         inputTokens: number;
         outputTokens: number;
     }) => void) | null;
+    /**
+     * Tool names pre-approved for the current session.
+     * Set by the host (e.g., opencode) and merged into preapproved_tools on each StartRequest.
+     * Updated when the user chooses "always" in the approval prompt.
+     */
+    sessionPreapprovedTools: string[];
+    /**
+     * Set the approval handler callback.
+     * Called when DWS requires tool call approval. Host (e.g., opencode) wires this
+     * to its permission system each stream call, similar to toolExecutor.
+     */
+    set approvalHandler(handler: ((tools: Array<{
+        name: string;
+        args: string;
+    }>) => Promise<{
+        approved: boolean;
+        message?: string;
+    }>) | null);
+    get approvalHandler(): ((tools: Array<{
+        name: string;
+        args: string;
+    }>) => Promise<{
+        approved: boolean;
+        message?: string;
+    }>) | null;
     /**
      * Optional callback invoked when multiple workflow models are available
      * and the user should pick one. Set per-stream by the host (e.g., OpenCode)
@@ -799,22 +848,15 @@ declare class GitLabWorkflowLanguageModel implements LanguageModelV2 {
      * Useful for consumers that need to track workflow state.
      */
     get workflowId(): string | null;
-    doGenerate(options: LanguageModelV2CallOptions): Promise<{
-        content: LanguageModelV2Content[];
-        finishReason: LanguageModelV2FinishReason;
-        usage: LanguageModelV2Usage;
-        warnings: LanguageModelV2CallWarning[];
-    }>;
-    doStream(options: LanguageModelV2CallOptions): Promise<{
-        stream: ReadableStream<LanguageModelV2StreamPart>;
-        request?: {
-            body?: unknown;
-        };
-    }>;
+    private createUsage;
+    private createFinishReason;
+    doGenerate(options: LanguageModelV3CallOptions): Promise<LanguageModelV3GenerateResult>;
+    doStream(options: LanguageModelV3CallOptions): Promise<LanguageModelV3StreamResult>;
     private handleWorkflowEvent;
     private processCheckpoint;
     private executeToolAndRespond;
     private cleanupClient;
+    private approveAndResume;
     private buildWorkflowMetadata;
     private getGitInfo;
     /**
@@ -845,10 +887,10 @@ declare class GitLabWorkflowLanguageModel implements LanguageModelV2 {
 }
 
 interface GitLabProvider {
-    (modelId: string): LanguageModelV2;
-    readonly specificationVersion: 'v2';
-    languageModel(modelId: string): LanguageModelV2;
-    chat(modelId: string): LanguageModelV2;
+    (modelId: string): LanguageModelV3;
+    readonly specificationVersion: 'v3';
+    languageModel(modelId: string): LanguageModelV3;
+    chat(modelId: string): LanguageModelV3;
     /**
      * Create an agentic chat model with tool calling support
      *
@@ -888,7 +930,7 @@ interface GitLabProvider {
      * });
      */
     workflowChat(modelId: string, options?: GitLabWorkflowOptions): GitLabWorkflowLanguageModel;
-    textEmbeddingModel(modelId: string): never;
+    embeddingModel(modelId: string): never;
     imageModel(modelId: string): never;
 }
 interface GitLabAgenticOptions {
@@ -1020,8 +1062,8 @@ interface GitLabOpenAIConfig {
      */
     aiGatewayHeaders?: Record<string, string>;
 }
-declare class GitLabOpenAILanguageModel implements LanguageModelV2 {
-    readonly specificationVersion: "v2";
+declare class GitLabOpenAILanguageModel implements LanguageModelV3 {
+    readonly specificationVersion: "v3";
     readonly modelId: string;
     readonly supportedUrls: Record<string, RegExp[]>;
     private readonly config;
@@ -1041,6 +1083,7 @@ declare class GitLabOpenAILanguageModel implements LanguageModelV2 {
     private convertToolChoice;
     private convertPrompt;
     private convertFinishReason;
+    private createUsage;
     /**
      * Convert tools to Responses API format
      */
@@ -1059,16 +1102,16 @@ declare class GitLabOpenAILanguageModel implements LanguageModelV2 {
      * so we need to check the content for tool calls separately.
      */
     private convertResponsesStatus;
-    doGenerate(options: LanguageModelV2CallOptions): Promise<{
-        content: LanguageModelV2Content[];
-        finishReason: LanguageModelV2FinishReason;
-        usage: LanguageModelV2Usage;
-        warnings: LanguageModelV2CallWarning[];
+    doGenerate(options: LanguageModelV3CallOptions): Promise<{
+        content: LanguageModelV3Content[];
+        finishReason: LanguageModelV3FinishReason;
+        usage: LanguageModelV3Usage;
+        warnings: [];
     }>;
     private doGenerateWithChatApi;
     private doGenerateWithResponsesApi;
-    doStream(options: LanguageModelV2CallOptions): Promise<{
-        stream: ReadableStream<LanguageModelV2StreamPart>;
+    doStream(options: LanguageModelV3CallOptions): Promise<{
+        stream: ReadableStream<LanguageModelV3StreamPart>;
         request?: {
             body?: unknown;
         };
@@ -1463,6 +1506,7 @@ declare class GitLabWorkflowClient {
     private buildWebSocketUrl;
     private buildWebSocketHeaders;
     private handleAction;
+    private extractApprovalTools;
     private send;
     private sendHeartbeatIfNeeded;
     private emit;
@@ -1639,4 +1683,4 @@ interface WorkflowDiscoveryResult {
 }
 declare function discoverWorkflowModels(config: WorkflowDiscoveryConfig, options: WorkflowDiscoveryOptions): Promise<WorkflowDiscoveryResult>;
 
-export { AGENT_PRIVILEGES, type ActionResponsePayload, type AdditionalContext, type AiChatAvailableModels, type AiModel, BUNDLED_CLIENT_ID, CLIENT_VERSION, type ClientEvent, DEFAULT_AGENT_PRIVILEGES, DEFAULT_AI_GATEWAY_URL, DEFAULT_CLIENT_CAPABILITIES, DEFAULT_WORKFLOW_DEFINITION, type DirectAccessToken, type DiscoveredModels, type DiscoveredWorkflowModel, GITLAB_COM_URL, type GenerateTokenResponse, type GitLabAgenticOptions, type GitLabAnthropicConfig, GitLabAnthropicLanguageModel, GitLabDirectAccessClient, type GitLabDirectAccessConfig, GitLabError, type GitLabErrorOptions, GitLabModelCache, GitLabModelConfigRegistry, GitLabModelDiscovery, GitLabOAuthManager, type GitLabOAuthTokenResponse, type GitLabOAuthTokens, type GitLabOpenAIConfig, GitLabOpenAILanguageModel, type GitLabProject, GitLabProjectCache, GitLabProjectDetector, type GitLabProjectDetectorConfig, type GitLabProvider, type GitLabProviderSettings, GitLabWorkflowClient, type GitLabWorkflowClientConfig, GitLabWorkflowLanguageModel, type GitLabWorkflowLanguageModelConfig, type GitLabWorkflowOptions, GitLabWorkflowTokenClient, MODEL_ID_TO_ANTHROPIC_MODEL, MODEL_MAPPINGS, type McpToolDefinition, type ModelCacheEntry, type ModelConfig, type ModelConfigRegistryOptions, type ModelDiscoveryConfig, type ModelMapping, type ModelProvider, type NewCheckpoint, OAUTH_SCOPES, OPENCODE_GITLAB_AUTH_CLIENT_ID, type OpenAIApiType, type OpenCodeAuth, type OpenCodeAuthApi, type OpenCodeAuthOAuth, type RunMcpTool, type StartRequest, TOKEN_EXPIRY_SKEW_MS, VERSION, WORKFLOW_ENVIRONMENT, WS_HEARTBEAT_INTERVAL_MS, WS_KEEPALIVE_PING_INTERVAL_MS, type WorkflowAction, type WorkflowClientEvent, type WorkflowDiscoveryConfig, type WorkflowDiscoveryOptions, type WorkflowDiscoveryResult, type WorkflowStatus, type WorkflowToolExecutor, WorkflowType, type WorkflowWebSocketOptions, createGitLab, discoverWorkflowModels, getAnthropicModelForModelId, getModelMapping, getOpenAIApiType, getOpenAIModelForModelId, getProviderForModelId, getValidModelsForProvider, getWorkflowModelRef, gitlab, isResponsesApiModel, isWorkflowModel, parseModelsYml };
+export { AGENT_PRIVILEGES, type ActionResponsePayload, type AdditionalContext, type AiChatAvailableModels, type AiModel, type ApprovalDecision, BUNDLED_CLIENT_ID, CLIENT_VERSION, type ClientEvent, DEFAULT_AGENT_PRIVILEGES, DEFAULT_AI_GATEWAY_URL, DEFAULT_CLIENT_CAPABILITIES, DEFAULT_WORKFLOW_DEFINITION, type DirectAccessToken, type DiscoveredModels, type DiscoveredWorkflowModel, GITLAB_COM_URL, type GenerateTokenResponse, type GitLabAgenticOptions, type GitLabAnthropicConfig, GitLabAnthropicLanguageModel, GitLabDirectAccessClient, type GitLabDirectAccessConfig, GitLabError, type GitLabErrorOptions, GitLabModelCache, GitLabModelConfigRegistry, GitLabModelDiscovery, GitLabOAuthManager, type GitLabOAuthTokenResponse, type GitLabOAuthTokens, type GitLabOpenAIConfig, GitLabOpenAILanguageModel, type GitLabProject, GitLabProjectCache, GitLabProjectDetector, type GitLabProjectDetectorConfig, type GitLabProvider, type GitLabProviderSettings, GitLabWorkflowClient, type GitLabWorkflowClientConfig, GitLabWorkflowLanguageModel, type GitLabWorkflowLanguageModelConfig, type GitLabWorkflowOptions, GitLabWorkflowTokenClient, MODEL_ID_TO_ANTHROPIC_MODEL, MODEL_MAPPINGS, type McpToolDefinition, type ModelCacheEntry, type ModelConfig, type ModelConfigRegistryOptions, type ModelDiscoveryConfig, type ModelMapping, type ModelProvider, type NewCheckpoint, OAUTH_SCOPES, OPENCODE_GITLAB_AUTH_CLIENT_ID, type OpenAIApiType, type OpenCodeAuth, type OpenCodeAuthApi, type OpenCodeAuthOAuth, type RunMcpTool, type StartRequest, TOKEN_EXPIRY_SKEW_MS, VERSION, WORKFLOW_ENVIRONMENT, WS_HEARTBEAT_INTERVAL_MS, WS_KEEPALIVE_PING_INTERVAL_MS, type WorkflowAction, type WorkflowClientEvent, type WorkflowDiscoveryConfig, type WorkflowDiscoveryOptions, type WorkflowDiscoveryResult, type WorkflowStatus, type WorkflowToolExecutor, WorkflowType, type WorkflowWebSocketOptions, createGitLab, discoverWorkflowModels, getAnthropicModelForModelId, getModelMapping, getOpenAIApiType, getOpenAIModelForModelId, getProviderForModelId, getValidModelsForProvider, getWorkflowModelRef, gitlab, isResponsesApiModel, isWorkflowModel, parseModelsYml };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { LanguageModelV2, LanguageModelV2CallOptions, LanguageModelV2Content, LanguageModelV2FinishReason, LanguageModelV2Usage, LanguageModelV2CallWarning, LanguageModelV2StreamPart } from '@ai-sdk/provider';
+import { LanguageModelV3, LanguageModelV3CallOptions, LanguageModelV3GenerateResult, LanguageModelV3StreamResult, LanguageModelV3Content, LanguageModelV3FinishReason, LanguageModelV3Usage, LanguageModelV3StreamPart } from '@ai-sdk/provider';
 import { z } from 'zod';
 
 interface GitLabAnthropicConfig {
@@ -47,8 +47,8 @@ interface GitLabAnthropicConfig {
  * for the duo-chat model. It connects to Claude through GitLab's cloud proxy
  * at https://cloud.gitlab.com/ai/v1/proxy/anthropic/
  */
-declare class GitLabAnthropicLanguageModel implements LanguageModelV2 {
-    readonly specificationVersion: "v2";
+declare class GitLabAnthropicLanguageModel implements LanguageModelV3 {
+    readonly specificationVersion: "v3";
     readonly modelId: string;
     readonly supportedUrls: Record<string, RegExp[]>;
     private readonly config;
@@ -86,22 +86,10 @@ declare class GitLabAnthropicLanguageModel implements LanguageModelV2 {
      * Convert Anthropic finish reason to AI SDK format
      */
     private convertFinishReason;
-    doGenerate(options: LanguageModelV2CallOptions): Promise<{
-        content: LanguageModelV2Content[];
-        finishReason: LanguageModelV2FinishReason;
-        usage: LanguageModelV2Usage;
-        warnings: LanguageModelV2CallWarning[];
-    }>;
+    private createUsage;
+    doGenerate(options: LanguageModelV3CallOptions): Promise<LanguageModelV3GenerateResult>;
     private doGenerateWithRetry;
-    doStream(options: LanguageModelV2CallOptions): Promise<{
-        stream: ReadableStream<LanguageModelV2StreamPart>;
-        request?: {
-            body?: unknown;
-        };
-        response?: {
-            headers?: Record<string, string>;
-        };
-    }>;
+    doStream(options: LanguageModelV3CallOptions): Promise<LanguageModelV3StreamResult>;
     private doStreamWithRetry;
 }
 
@@ -358,6 +346,17 @@ interface StartRequest {
     preapproved_tools?: string[];
     flowConfig?: unknown;
     flowConfigSchemaVersion?: string;
+    approval?: ApprovalDecision;
+}
+interface ApprovalDecision {
+    approval?: {
+        remember_approval?: boolean;
+        tool_name?: string;
+        tool_args_json?: string;
+    };
+    rejection?: {
+        message?: string;
+    };
 }
 interface ActionResponsePayload {
     requestID: string;
@@ -563,6 +562,25 @@ interface GitLabWorkflowOptions {
      * @returns The selected model ref, or null/undefined for default
      */
     onSelectModel?: (models: AiModel[]) => Promise<string | null | undefined>;
+    /**
+     * Agent privileges to request when creating the workflow.
+     * Defaults to DEFAULT_AGENT_PRIVILEGES (all privileges).
+     * Pass a subset to restrict which tools DWS pre-approves server-side,
+     * causing TOOL_CALL_APPROVAL_REQUIRED for excluded privileges.
+     */
+    agentPrivileges?: number[];
+    /**
+     * Called when DWS requires approval for a tool call.
+     * Return `{ approved: true }` to proceed or `{ approved: false, message? }` to reject.
+     * If not set, the stream ends silently when approval is required (backward compat).
+     */
+    approvalHandler?: (tools: Array<{
+        name: string;
+        args: string;
+    }>) => Promise<{
+        approved: boolean;
+        message?: string;
+    }>;
 }
 interface GitLabWorkflowClientConfig {
     /** GitLab instance URL (e.g., 'https://gitlab.com') */
@@ -596,6 +614,12 @@ type WorkflowClientEvent = {
     requestID: string;
     toolName: string;
     data: Record<string, unknown>;
+} | {
+    type: 'approval-required';
+    tools: Array<{
+        name: string;
+        args: string;
+    }>;
 } | {
     type: 'completed';
 } | {
@@ -665,11 +689,11 @@ type WorkflowToolExecutor = (toolName: string, args: string, requestID: string)
 /**
  * GitLab Duo Agent Platform Language Model.
  *
- * Implements LanguageModelV2 by bridging the DWS WebSocket protocol
+ * Implements LanguageModelV3 by bridging the DWS WebSocket protocol
  * to the Vercel AI SDK stream part format.
  */
-declare class GitLabWorkflowLanguageModel implements LanguageModelV2 {
-    readonly specificationVersion: "v2";
+declare class GitLabWorkflowLanguageModel implements LanguageModelV3 {
+    readonly specificationVersion: "v3";
     readonly modelId: string;
     readonly supportedUrls: Record<string, RegExp[]>;
     private readonly config;
@@ -725,6 +749,31 @@ declare class GitLabWorkflowLanguageModel implements LanguageModelV2 {
         inputTokens: number;
         outputTokens: number;
     }) => void) | null;
+    /**
+     * Tool names pre-approved for the current session.
+     * Set by the host (e.g., opencode) and merged into preapproved_tools on each StartRequest.
+     * Updated when the user chooses "always" in the approval prompt.
+     */
+    sessionPreapprovedTools: string[];
+    /**
+     * Set the approval handler callback.
+     * Called when DWS requires tool call approval. Host (e.g., opencode) wires this
+     * to its permission system each stream call, similar to toolExecutor.
+     */
+    set approvalHandler(handler: ((tools: Array<{
+        name: string;
+        args: string;
+    }>) => Promise<{
+        approved: boolean;
+        message?: string;
+    }>) | null);
+    get approvalHandler(): ((tools: Array<{
+        name: string;
+        args: string;
+    }>) => Promise<{
+        approved: boolean;
+        message?: string;
+    }>) | null;
     /**
      * Optional callback invoked when multiple workflow models are available
      * and the user should pick one. Set per-stream by the host (e.g., OpenCode)
@@ -799,22 +848,15 @@ declare class GitLabWorkflowLanguageModel implements LanguageModelV2 {
      * Useful for consumers that need to track workflow state.
      */
     get workflowId(): string | null;
-    doGenerate(options: LanguageModelV2CallOptions): Promise<{
-        content: LanguageModelV2Content[];
-        finishReason: LanguageModelV2FinishReason;
-        usage: LanguageModelV2Usage;
-        warnings: LanguageModelV2CallWarning[];
-    }>;
-    doStream(options: LanguageModelV2CallOptions): Promise<{
-        stream: ReadableStream<LanguageModelV2StreamPart>;
-        request?: {
-            body?: unknown;
-        };
-    }>;
+    private createUsage;
+    private createFinishReason;
+    doGenerate(options: LanguageModelV3CallOptions): Promise<LanguageModelV3GenerateResult>;
+    doStream(options: LanguageModelV3CallOptions): Promise<LanguageModelV3StreamResult>;
     private handleWorkflowEvent;
     private processCheckpoint;
     private executeToolAndRespond;
     private cleanupClient;
+    private approveAndResume;
     private buildWorkflowMetadata;
     private getGitInfo;
     /**
@@ -845,10 +887,10 @@ declare class GitLabWorkflowLanguageModel implements LanguageModelV2 {
 }
 
 interface GitLabProvider {
-    (modelId: string): LanguageModelV2;
-    readonly specificationVersion: 'v2';
-    languageModel(modelId: string): LanguageModelV2;
-    chat(modelId: string): LanguageModelV2;
+    (modelId: string): LanguageModelV3;
+    readonly specificationVersion: 'v3';
+    languageModel(modelId: string): LanguageModelV3;
+    chat(modelId: string): LanguageModelV3;
     /**
      * Create an agentic chat model with tool calling support
      *
@@ -888,7 +930,7 @@ interface GitLabProvider {
      * });
      */
     workflowChat(modelId: string, options?: GitLabWorkflowOptions): GitLabWorkflowLanguageModel;
-    textEmbeddingModel(modelId: string): never;
+    embeddingModel(modelId: string): never;
     imageModel(modelId: string): never;
 }
 interface GitLabAgenticOptions {
@@ -1020,8 +1062,8 @@ interface GitLabOpenAIConfig {
      */
     aiGatewayHeaders?: Record<string, string>;
 }
-declare class GitLabOpenAILanguageModel implements LanguageModelV2 {
-    readonly specificationVersion: "v2";
+declare class GitLabOpenAILanguageModel implements LanguageModelV3 {
+    readonly specificationVersion: "v3";
     readonly modelId: string;
     readonly supportedUrls: Record<string, RegExp[]>;
     private readonly config;
@@ -1041,6 +1083,7 @@ declare class GitLabOpenAILanguageModel implements LanguageModelV2 {
     private convertToolChoice;
     private convertPrompt;
     private convertFinishReason;
+    private createUsage;
     /**
      * Convert tools to Responses API format
      */
@@ -1059,16 +1102,16 @@ declare class GitLabOpenAILanguageModel implements LanguageModelV2 {
      * so we need to check the content for tool calls separately.
      */
     private convertResponsesStatus;
-    doGenerate(options: LanguageModelV2CallOptions): Promise<{
-        content: LanguageModelV2Content[];
-        finishReason: LanguageModelV2FinishReason;
-        usage: LanguageModelV2Usage;
-        warnings: LanguageModelV2CallWarning[];
+    doGenerate(options: LanguageModelV3CallOptions): Promise<{
+        content: LanguageModelV3Content[];
+        finishReason: LanguageModelV3FinishReason;
+        usage: LanguageModelV3Usage;
+        warnings: [];
     }>;
     private doGenerateWithChatApi;
     private doGenerateWithResponsesApi;
-    doStream(options: LanguageModelV2CallOptions): Promise<{
-        stream: ReadableStream<LanguageModelV2StreamPart>;
+    doStream(options: LanguageModelV3CallOptions): Promise<{
+        stream: ReadableStream<LanguageModelV3StreamPart>;
         request?: {
             body?: unknown;
         };
@@ -1463,6 +1506,7 @@ declare class GitLabWorkflowClient {
     private buildWebSocketUrl;
     private buildWebSocketHeaders;
     private handleAction;
+    private extractApprovalTools;
     private send;
     private sendHeartbeatIfNeeded;
     private emit;
@@ -1639,4 +1683,4 @@ interface WorkflowDiscoveryResult {
 }
 declare function discoverWorkflowModels(config: WorkflowDiscoveryConfig, options: WorkflowDiscoveryOptions): Promise<WorkflowDiscoveryResult>;
 
-export { AGENT_PRIVILEGES, type ActionResponsePayload, type AdditionalContext, type AiChatAvailableModels, type AiModel, BUNDLED_CLIENT_ID, CLIENT_VERSION, type ClientEvent, DEFAULT_AGENT_PRIVILEGES, DEFAULT_AI_GATEWAY_URL, DEFAULT_CLIENT_CAPABILITIES, DEFAULT_WORKFLOW_DEFINITION, type DirectAccessToken, type DiscoveredModels, type DiscoveredWorkflowModel, GITLAB_COM_URL, type GenerateTokenResponse, type GitLabAgenticOptions, type GitLabAnthropicConfig, GitLabAnthropicLanguageModel, GitLabDirectAccessClient, type GitLabDirectAccessConfig, GitLabError, type GitLabErrorOptions, GitLabModelCache, GitLabModelConfigRegistry, GitLabModelDiscovery, GitLabOAuthManager, type GitLabOAuthTokenResponse, type GitLabOAuthTokens, type GitLabOpenAIConfig, GitLabOpenAILanguageModel, type GitLabProject, GitLabProjectCache, GitLabProjectDetector, type GitLabProjectDetectorConfig, type GitLabProvider, type GitLabProviderSettings, GitLabWorkflowClient, type GitLabWorkflowClientConfig, GitLabWorkflowLanguageModel, type GitLabWorkflowLanguageModelConfig, type GitLabWorkflowOptions, GitLabWorkflowTokenClient, MODEL_ID_TO_ANTHROPIC_MODEL, MODEL_MAPPINGS, type McpToolDefinition, type ModelCacheEntry, type ModelConfig, type ModelConfigRegistryOptions, type ModelDiscoveryConfig, type ModelMapping, type ModelProvider, type NewCheckpoint, OAUTH_SCOPES, OPENCODE_GITLAB_AUTH_CLIENT_ID, type OpenAIApiType, type OpenCodeAuth, type OpenCodeAuthApi, type OpenCodeAuthOAuth, type RunMcpTool, type StartRequest, TOKEN_EXPIRY_SKEW_MS, VERSION, WORKFLOW_ENVIRONMENT, WS_HEARTBEAT_INTERVAL_MS, WS_KEEPALIVE_PING_INTERVAL_MS, type WorkflowAction, type WorkflowClientEvent, type WorkflowDiscoveryConfig, type WorkflowDiscoveryOptions, type WorkflowDiscoveryResult, type WorkflowStatus, type WorkflowToolExecutor, WorkflowType, type WorkflowWebSocketOptions, createGitLab, discoverWorkflowModels, getAnthropicModelForModelId, getModelMapping, getOpenAIApiType, getOpenAIModelForModelId, getProviderForModelId, getValidModelsForProvider, getWorkflowModelRef, gitlab, isResponsesApiModel, isWorkflowModel, parseModelsYml };
+export { AGENT_PRIVILEGES, type ActionResponsePayload, type AdditionalContext, type AiChatAvailableModels, type AiModel, type ApprovalDecision, BUNDLED_CLIENT_ID, CLIENT_VERSION, type ClientEvent, DEFAULT_AGENT_PRIVILEGES, DEFAULT_AI_GATEWAY_URL, DEFAULT_CLIENT_CAPABILITIES, DEFAULT_WORKFLOW_DEFINITION, type DirectAccessToken, type DiscoveredModels, type DiscoveredWorkflowModel, GITLAB_COM_URL, type GenerateTokenResponse, type GitLabAgenticOptions, type GitLabAnthropicConfig, GitLabAnthropicLanguageModel, GitLabDirectAccessClient, type GitLabDirectAccessConfig, GitLabError, type GitLabErrorOptions, GitLabModelCache, GitLabModelConfigRegistry, GitLabModelDiscovery, GitLabOAuthManager, type GitLabOAuthTokenResponse, type GitLabOAuthTokens, type GitLabOpenAIConfig, GitLabOpenAILanguageModel, type GitLabProject, GitLabProjectCache, GitLabProjectDetector, type GitLabProjectDetectorConfig, type GitLabProvider, type GitLabProviderSettings, GitLabWorkflowClient, type GitLabWorkflowClientConfig, GitLabWorkflowLanguageModel, type GitLabWorkflowLanguageModelConfig, type GitLabWorkflowOptions, GitLabWorkflowTokenClient, MODEL_ID_TO_ANTHROPIC_MODEL, MODEL_MAPPINGS, type McpToolDefinition, type ModelCacheEntry, type ModelConfig, type ModelConfigRegistryOptions, type ModelDiscoveryConfig, type ModelMapping, type ModelProvider, type NewCheckpoint, OAUTH_SCOPES, OPENCODE_GITLAB_AUTH_CLIENT_ID, type OpenAIApiType, type OpenCodeAuth, type OpenCodeAuthApi, type OpenCodeAuthOAuth, type RunMcpTool, type StartRequest, TOKEN_EXPIRY_SKEW_MS, VERSION, WORKFLOW_ENVIRONMENT, WS_HEARTBEAT_INTERVAL_MS, WS_KEEPALIVE_PING_INTERVAL_MS, type WorkflowAction, type WorkflowClientEvent, type WorkflowDiscoveryConfig, type WorkflowDiscoveryOptions, type WorkflowDiscoveryResult, type WorkflowStatus, type WorkflowToolExecutor, WorkflowType, type WorkflowWebSocketOptions, createGitLab, discoverWorkflowModels, getAnthropicModelForModelId, getModelMapping, getOpenAIApiType, getOpenAIModelForModelId, getProviderForModelId, getValidModelsForProvider, getWorkflowModelRef, gitlab, isResponsesApiModel, isWorkflowModel, parseModelsYml };