855 lines (536 loc) · 15 KB

@ai-sdk/policy

1.0.77

Patch Changes

Updated dependencies [b74971f]
- @ai-sdk/provider-utils@5.0.29
- ai@7.0.77

1.0.76

Patch Changes

Updated dependencies [c6d57f3]
Updated dependencies [677a707]
- ai@7.0.76

1.0.75

Patch Changes

Updated dependencies [8978ad8]
- ai@7.0.75

1.0.74

Patch Changes

ai@7.0.74

1.0.73

Patch Changes

ai@7.0.73

1.0.72

Patch Changes

ai@7.0.72

1.0.71

Patch Changes

Updated dependencies [9a37469]
- ai@7.0.71

1.0.70

Patch Changes

Updated dependencies [e6087c9]
Updated dependencies [9566914]
Updated dependencies [b181020]
Updated dependencies [7054073]
Updated dependencies [a828527]
Updated dependencies [d3cc3fe]
- @ai-sdk/provider-utils@5.0.28
- ai@7.0.70

1.0.69

Patch Changes

ai@7.0.69

1.0.68

Patch Changes

ai@7.0.68

1.0.67

Patch Changes

ai@7.0.67

1.0.66

Patch Changes

Updated dependencies [0782259]
Updated dependencies [2fd1214]
- ai@7.0.66

1.0.65

Patch Changes

Updated dependencies [dc8caae]
Updated dependencies [72ec74f]
Updated dependencies [c5b0515]
- ai@7.0.65

1.0.64

Patch Changes

ai@7.0.64

1.0.63

Patch Changes

Updated dependencies [d0a5807]
Updated dependencies [dcf33e8]
- ai@7.0.63

1.0.62

Patch Changes

Updated dependencies [e0bcf52]
- ai@7.0.62

1.0.61

Patch Changes

Updated dependencies [326054b]
Updated dependencies [975bb28]
Updated dependencies [7fbfc6d]
- ai@7.0.61
- @ai-sdk/provider-utils@5.0.27

1.0.60

Patch Changes

Updated dependencies [79c52ef]
- ai@7.0.60

1.0.59

Patch Changes

Updated dependencies [401a4ba]
- @ai-sdk/provider-utils@5.0.26
- ai@7.0.59

1.0.58

Patch Changes

Updated dependencies [72ad23f]
Updated dependencies [ad6a650]
Updated dependencies [81cd026]
- ai@7.0.58
- @ai-sdk/provider@4.0.7
- @ai-sdk/provider-utils@5.0.25

1.0.57

Patch Changes

Updated dependencies [1937bef]
- @ai-sdk/provider-utils@5.0.24
- ai@7.0.57

1.0.56

Patch Changes

Updated dependencies [25c9120]
Updated dependencies [89080c8]
Updated dependencies [79d6195]
- ai@7.0.56

1.0.55

Patch Changes

Updated dependencies [3469d0c]
- @ai-sdk/provider@4.0.6
- ai@7.0.55
- @ai-sdk/provider-utils@5.0.23

1.0.54

Patch Changes

Updated dependencies [a6b17a2]
Updated dependencies [5615eb7]
Updated dependencies [36a3ff6]
- ai@7.0.54

1.0.53

Patch Changes

Updated dependencies [cd0177b]
Updated dependencies [2b60826]
Updated dependencies [a09fdef]
- ai@7.0.53
- @ai-sdk/provider-utils@5.0.22

1.0.52

Patch Changes

Updated dependencies [3836a85]
Updated dependencies [1bec07d]
- ai@7.0.52
- @ai-sdk/provider-utils@5.0.21

1.0.51

Patch Changes

Updated dependencies [160ccdb]
- @ai-sdk/provider-utils@5.0.20
- ai@7.0.51

1.0.50

Patch Changes

Updated dependencies [79e133c]
Updated dependencies [da64b51]
- @ai-sdk/provider@4.0.5
- ai@7.0.50
- @ai-sdk/provider-utils@5.0.19

1.0.49

Patch Changes

ai@7.0.49

1.0.48

Patch Changes

ai@7.0.48

1.0.47

Patch Changes

Updated dependencies [5fc7da5]
Updated dependencies [93b2acd]
- @ai-sdk/provider-utils@5.0.18
- ai@7.0.47

1.0.46

Patch Changes

ai@7.0.46

1.0.45

Patch Changes

Updated dependencies [d6ce0ee]
Updated dependencies [fa95504]
Updated dependencies [349afe7]
- ai@7.0.45
- @ai-sdk/provider-utils@5.0.17

1.0.44

Patch Changes

Updated dependencies [015acb4]
- ai@7.0.44

1.0.43

Patch Changes

Updated dependencies [d8210b6]
Updated dependencies [b192878]
- @ai-sdk/provider-utils@5.0.16
- ai@7.0.43

1.0.42

Patch Changes

Updated dependencies [1659cd5]
Updated dependencies [60f97f6]
Updated dependencies [6a5bdff]
Updated dependencies [6de2ec1]
- @ai-sdk/provider-utils@5.0.15
- ai@7.0.42

1.0.41

Patch Changes

Updated dependencies [2e2224b]
- ai@7.0.41

1.0.40

Patch Changes

Updated dependencies [c3782a6]
- ai@7.0.40

1.0.39

Patch Changes

Updated dependencies [0c464d9]
Updated dependencies [09a52cb]
Updated dependencies [c49380c]
- @ai-sdk/provider-utils@5.0.14
- ai@7.0.39

1.0.38

Patch Changes

Updated dependencies [7bd6bdd]
Updated dependencies [1e2f324]
- ai@7.0.38
- @ai-sdk/provider@4.0.4
- @ai-sdk/provider-utils@5.0.13

1.0.37

Patch Changes

ai@7.0.37

1.0.36

Patch Changes

Updated dependencies [7fa85b2]
- ai@7.0.36

1.0.35

Patch Changes

Updated dependencies [7f6650b]
Updated dependencies [106ea59]
- ai@7.0.35

1.0.34

Patch Changes

ai@7.0.34

1.0.33

Patch Changes

Updated dependencies [02ffdcb]
Updated dependencies [76cb673]
Updated dependencies [e808fa5]
Updated dependencies [33647d7]
- @ai-sdk/provider-utils@5.0.12
- ai@7.0.33

1.0.32

Patch Changes

Updated dependencies [6cd7c74]
Updated dependencies [e35bcae]
Updated dependencies [a4eb3f3]
- ai@7.0.32

1.0.31

Patch Changes

Updated dependencies [70f18c3]
Updated dependencies [cd06458]
- ai@7.0.31
- @ai-sdk/provider-utils@5.0.11

1.0.30

Patch Changes

ai@7.0.30

1.0.29

Patch Changes

ai@7.0.29

1.0.28

Patch Changes

Updated dependencies [0bc8d4f]
- ai@7.0.28

1.0.27

Patch Changes

Updated dependencies [ac01b79]
Updated dependencies [31c7be8]
Updated dependencies [2696562]
- ai@7.0.27
- @ai-sdk/provider-utils@5.0.10

1.0.26

Patch Changes

Updated dependencies [27d294d]
- ai@7.0.26

1.0.25

Patch Changes

Updated dependencies [4be62c1]
Updated dependencies [7805e4a]
Updated dependencies [7805e4a]
Updated dependencies [f8e82fd]
Updated dependencies [cd12954]
- @ai-sdk/provider-utils@5.0.9
- ai@7.0.25

1.0.24

Patch Changes

Updated dependencies [e193290]
Updated dependencies [e193290]
- @ai-sdk/provider-utils@5.0.8
- ai@7.0.24

1.0.23

Patch Changes

Updated dependencies [930f949]
- ai@7.0.23

1.0.22

Patch Changes

Updated dependencies [8f89c25]
- ai@7.0.22

1.0.21

Patch Changes

Updated dependencies [308a519]
- ai@7.0.21

1.0.20

Patch Changes

Updated dependencies [b9ac19f]
Updated dependencies [a4186d6]
- ai@7.0.20

1.0.19

Patch Changes

aad737d: Use own-property checks when resolving per-tool approvals so tool names and approval ids that match inherited object properties (e.g. constructor, toString, valueOf, __proto__) are treated as unconfigured/absent.
- @ai-sdk/policy-opa: wrapMcpTools builds its per-tool map with a null prototype and reads supplied approvals via an own-property check, and shadow guards its per-tool map lookup the same way.
- ai: tool and tool-context lookups keyed by a model- or client-supplied name now go through an own-property check (getOwn), so a name matching an inherited object property resolves to "no such tool"/"unconfigured" instead of a prototype value. This covers the approval path (per-tool approval resolution and replay re-validation) as well as tool-call parsing, execution, streaming callbacks, and UI message conversion/validation. The human-in-the-loop approval matching (collectToolApprovals) and streaming tool-name maps are built with a null prototype so a client-supplied id that matches an inherited property no longer slips past the "unknown approval" / "tool call not found" guards.
47bd0a6: wrapMcpTools: per-tool approval functions now fail closed. In the per-tool map form, a per-tool approval function that returns a "no opinion" result (not-applicable or undefined) is now forced through the configured fallback (user-approval by default), matching the generic-function form. Previously such a result passed through and the tool resolved to not-applicable, letting it run without an approval request. Static per-tool statuses the caller configured explicitly are unchanged.
Updated dependencies [be7f05a]
Updated dependencies [ee55a07]
Updated dependencies [aad737d]
Updated dependencies [0f93c57]
- ai@7.0.19
- @ai-sdk/provider@4.0.3
- @ai-sdk/provider-utils@5.0.7

1.0.18

Patch Changes

Updated dependencies [ac306ed]
- @ai-sdk/provider-utils@5.0.6
- ai@7.0.18

1.0.17

Patch Changes

ai@7.0.17

1.0.16

Patch Changes

Updated dependencies [a8f9b6d]
- ai@7.0.16

1.0.15

Patch Changes

ai@7.0.15

1.0.14

Patch Changes

5c5c0f5: Add experimental streaming transcription support for transcription models, including OpenAI gpt-realtime-whisper and xAI WebSocket STT.
Updated dependencies [5c5c0f5]
- ai@7.0.14
- @ai-sdk/provider@4.0.2
- @ai-sdk/provider-utils@5.0.5

1.0.13

Patch Changes

ai@7.0.13

1.0.12

Patch Changes

Updated dependencies [ecfeb6f]
Updated dependencies [a193137]
Updated dependencies [c6f5e62]
- ai@7.0.12
- @ai-sdk/provider-utils@5.0.4

1.0.11

Patch Changes

Updated dependencies [0a87626]
- ai@7.0.11

1.0.10

Patch Changes

Updated dependencies [8c616f0]
- ai@7.0.10
- @ai-sdk/provider-utils@5.0.3

1.0.9

Patch Changes

ai@7.0.9

1.0.8

Patch Changes

Updated dependencies [0274f34]
- @ai-sdk/provider@4.0.1
- ai@7.0.8
- @ai-sdk/provider-utils@5.0.2

1.0.7

Patch Changes

Updated dependencies [d598481]
- ai@7.0.7

1.0.6

Patch Changes

Updated dependencies [989402d]
- ai@7.0.6

1.0.5

Patch Changes

Updated dependencies [a2750db]
- ai@7.0.5

1.0.4

Patch Changes

Updated dependencies [6a436e3]
- @ai-sdk/provider-utils@5.0.1
- ai@7.0.4

1.0.3

Patch Changes

ai@7.0.3

1.0.2

Patch Changes

ai@7.0.2

1.0.1

Patch Changes

ai@7.0.1

1.0.0

Major Changes

a94c258: Introduce @ai-sdk/policy-opa, an Open Policy Agent adapter for the toolApproval callback on generateText / streamText / ToolLoopAgent.

Everything is exported from the package root. The engine-neutral core is a PolicyClient interface, shadow() for safe policy rollout with fire-and-forget telemetry, and wrapMcpTools() for making approval configuration total over a discovered tool surface. The OPA layer ships opaPolicy / optionalOpaPolicy (Rego-as-code authorization), wasmPolicyClient and httpPolicyClient backends (lazy-loaded optional peer deps), opaCapabilityMiddleware for fail-closed model-level tool filtering, and normalizeOpaDecision for users who call OPA themselves.

Sits entirely on top of the public SDK surface, with no changes to ai, @ai-sdk/provider, or @ai-sdk/provider-utils. Transitive enforcement (coarse dispatchers like bash / http.request / MCP proxies) is handled inside the user's toolApproval by parsing the dispatcher input and routing to the same Rego rule that gates the direct tool.

Patch Changes

9a1b0ea: Initial release
b8396f0: trigger initial beta release

1.0.0-beta.24

Patch Changes

ai@7.0.0-beta.187

1.0.0-beta.23

Patch Changes

ai@7.0.0-beta.186

1.0.0-beta.22

Patch Changes

Updated dependencies [75763b0]
- ai@7.0.0-beta.185

1.0.0-beta.21

Patch Changes

Updated dependencies [0416e3e]
- @ai-sdk/provider@4.0.0-beta.20
- ai@7.0.0-beta.184
- @ai-sdk/provider-utils@5.0.0-beta.50

1.0.0-beta.20

Patch Changes

ai@7.0.0-beta.183

1.0.0-beta.19

Patch Changes

Updated dependencies [cc6ab90]
- ai@7.0.0-beta.182

1.0.0-beta.18

Patch Changes

Updated dependencies [6a2caf9]
- ai@7.0.0-beta.181

1.0.0-beta.17

Patch Changes

Updated dependencies [81a284b]
- ai@7.0.0-beta.180

1.0.0-beta.16

Patch Changes

ai@7.0.0-beta.179

1.0.0-beta.15

Patch Changes

Updated dependencies [b097c52]
- ai@7.0.0-beta.178

1.0.0-beta.14

Patch Changes

b8396f0: trigger initial beta release
Updated dependencies [b8396f0]
- @ai-sdk/provider-utils@5.0.0-beta.49
- @ai-sdk/provider@4.0.0-beta.19
- ai@7.0.0-beta.177

1.0.0-canary.13

Patch Changes

ai@7.0.0-canary.176

1.0.0-canary.12

Patch Changes

Updated dependencies [6ec57f5]
- ai@7.0.0-canary.175

1.0.0-canary.11

Patch Changes

ai@7.0.0-canary.174

1.0.0-canary.10

Patch Changes

ai@7.0.0-canary.173

1.0.0-canary.9

Patch Changes

Updated dependencies [aeda373]
Updated dependencies [25a64f8]
Updated dependencies [375fdd7]
Updated dependencies [f18b08f]
Updated dependencies [b4507d5]
- @ai-sdk/provider-utils@5.0.0-canary.48
- ai@7.0.0-canary.172

1.0.0-canary.8

Patch Changes

Updated dependencies [89ad56f]
Updated dependencies [f9a496f]
Updated dependencies [3295831]
- ai@7.0.0-canary.171

1.0.0-canary.7

Patch Changes

Updated dependencies [bae5e2b]
Updated dependencies [69d7128]
- ai@7.0.0-canary.170
- @ai-sdk/provider-utils@5.0.0-canary.47

1.0.0-canary.6

Patch Changes

Updated dependencies [a5018ab]
Updated dependencies [21d3d60]
Updated dependencies [426dbbb]
Updated dependencies [7fd3360]
- ai@7.0.0-canary.169

1.0.0-canary.5

Patch Changes

Updated dependencies [1e4b350]
- ai@7.0.0-canary.168

1.0.0-canary.4

Patch Changes

Updated dependencies [4757690]
Updated dependencies [eeefc3f]
Updated dependencies [b79b6a8]
- ai@7.0.0-canary.167

1.0.0-canary.3

Patch Changes

Updated dependencies [19736ee]
Updated dependencies [d66ae02]
Updated dependencies [e4182bd]
- ai@7.0.0-canary.166

1.0.0-canary.2

Patch Changes

Updated dependencies [ce769dd]
- @ai-sdk/provider@4.0.0-canary.18
- ai@7.0.0-canary.165
- @ai-sdk/provider-utils@5.0.0-canary.46

1.0.0-canary.1

Patch Changes

9a1b0ea: Initial release
- ai@7.0.0-canary.164

1.0.0-canary.0

Major Changes

a94c258: Introduce @ai-sdk/policy-opa, an Open Policy Agent adapter for the toolApproval callback on generateText / streamText / ToolLoopAgent.

Everything is exported from the package root. The engine-neutral core is a PolicyClient interface, shadow() for safe policy rollout with fire-and-forget telemetry, and wrapMcpTools() for making approval configuration total over a discovered tool surface. The OPA layer ships opaPolicy / optionalOpaPolicy (Rego-as-code authorization), wasmPolicyClient and httpPolicyClient backends (lazy-loaded optional peer deps), opaCapabilityMiddleware for fail-closed model-level tool filtering, and normalizeOpaDecision for users who call OPA themselves.

Sits entirely on top of the public SDK surface, with no changes to ai, @ai-sdk/provider, or @ai-sdk/provider-utils. Transitive enforcement (coarse dispatchers like bash / http.request / MCP proxies) is handled inside the user's toolApproval by parsing the dispatcher input and routing to the same Rego rule that gates the direct tool.

Patch Changes

Updated dependencies [ee798eb]
Updated dependencies [daf6637]
Updated dependencies [c907622]
- @ai-sdk/provider-utils@5.0.0-canary.45
- ai@7.0.0-canary.163