Changelog

Patch Changes

• 113dea8: Bump all dependencies. The AI SDK moves to the v4 provider spec: @ai-sdk/anthropic, @ai-sdk/google, @ai-sdk/groq, @ai-sdk/mistral, @ai-sdk/openai and @ai-sdk/xai to ^4, @ai-sdk/togetherai to ^3, and the ai core to ^7 (required so the core recognises the new LanguageModelV4/EmbeddingModelV4/ImageModelV4 specification). Peer ranges are unchanged, so existing installs keep working. All remaining dev and tooling dependencies (TypeScript, @types/node, pg/@electric-sql/pglite, oxlint/ultracite, Turborepo, Remotion) are also brought up to date.

Minor Changes

• fd40b65: Add batchImages() for batch image-generation requests. It returns the same BatchJob handle as batch(), with each prompt producing one or more images correlated by customId, and exposes them on a new BatchResult.images field (inline base64 data/mediaType, or a hosted url). Supported on OpenAI (/v1/images/generations), Google Gemini image models (:batchGenerateContent), and xAI (/v1/images/generations); other providers throw UnsupportedProviderError. Generation only — image editing and Imagen models aren’t batch-supported.
• c073c1a: Add a unified batch.* namespace: batch.text(), batch.embeddings(), and batch.images(). batch() remains a callable shorthand for batch.text(). The standalone batchEmbeddings() and batchImages() exports are now deprecated aliases for batch.embeddings() and batch.images() respectively, and will be removed in a future major.

Minor Changes

• b92aa39: Add batchEmbeddings() for batch embedding requests. It returns the same BatchJob handle as batch(), with one vector per request correlated by customId, and exposes the vector on a new BatchResult.embedding field. Supported on OpenAI, Mistral, and Google Gemini (Anthropic, Groq, and xAI have no embedding model, and Together’s batch API doesn’t accept the embeddings endpoint).

Patch Changes

• 6dd605a: Enforce captured provider request byte limits before parsing the captured body so oversized requests are rejected before JSON allocation.
• ec523e0: Fix BatchJob.wait() leaking abort event listeners on the provided AbortSignal. The internal delay attached a listener each poll but only removed it on abort, so a long-running wait accumulated one dangling listener per poll interval. The listener is now detached when the delay resolves normally.
• af7a1a0: Reject redirects during direct provider file uploads so multipart JSONL request bodies cannot be replayed to redirected destinations.
• 29d0d71: Fix webhook and Together upload URL validation rejecting legitimate hostnames that begin with fc/fd (e.g. fc2.com). The private-IPv6 guard now only applies to actual IPv6 literals (those containing a colon), so bare DNS names are no longer mistaken for fc00::/7 addresses.
• 7d44c0a: Reject redirects while downloading provider result files so result URL and file-id validation cannot be bypassed by a redirected response.
• 9d610fe: Fix toDate returning an Invalid Date for empty or malformed provider timestamps. Such a value previously survived into a snapshot and threw RangeError: Invalid time value when the date was serialized (e.g. building a webhook event); the field is now coerced to undefined instead.
• 397c95d: Reject redirects during Together presigned PUT uploads so JSONL batch bodies cannot be replayed after the initial upload URL validation.
• 7e702cd: Check aggregate upload byte limits while encoding provider payloads so oversized JSONL and inline batch submissions are rejected before full payload materialization.
• 1c12f63: Block IPv4-mapped IPv6 literals in the default webhook URL validator so mapped loopback and private-network destinations cannot bypass the private IPv4 checks.
• 4054ff0: Harden webhook replay tracking by supporting atomic replay-store claims and serializing legacy async replay stores per webhook id to prevent concurrent signed replays.
• ac706ba: Fix the xAI batch snapshot reporting completedAt from the batch’s cancel_time. A normally-completed batch now reads its completion timestamp from finish_time, and completedAt is left unset for batches that were never cancelled but had no finish time (rather than surfacing a misleading cancellation time).

Patch Changes

• a8d4f19: Add configurable request count, request byte, upload byte, and capture concurrency limits for batch creation.
• 52d0ca5: Redact upstream provider response bodies from BatchworkError messages.
• e9a6ab8: Validate OpenAI-compatible batch and file ids before using them in provider API paths.
• 65b177d: Reject replayed webhook ids during webhook signature verification.
• 06b5d24: Keep Anthropic result downloads on the configured provider origin.
• 6e06892: Validate Google Gemini operation ids before using them in provider API paths.
• 4f91af8: Validate Mistral job and file ids before using them in provider API paths.
• 893d23b: Require explicit authorization or opt-in for Next.js cron polling routes.
• c2b6837: Prevent webhook delivery from following redirects after URL validation.
• 671df48: Validate default poller webhook destinations before tracking and delivery.
• 88471d8: Validate Anthropic batch ids before using them in provider API paths.
• 2153cae: Validate Together presigned upload locations before sending JSONL bytes.
• 9a5b126: Cap JSONL parser line sizes and wrap malformed JSONL in sanitized Batchwork errors.
• 8ed4a04: Restrict the CI workflow’s GITHUB_TOKEN to contents: read, resolving the missing workflow permissions code-scanning alert.
• 723dc99: Validate xAI batch ids before using them in provider API paths.
• 67098ba: Validate the OpenAI request host by exact hostname comparison instead of a substring match in the Next.js test, resolving the incomplete URL substring sanitization code-scanning alert.

Major Changes

• af9a1e4: Initial 1.0 release. A unified batch API for AI providers spanning seven of them across three shapes: submit generateText-shaped requests with batch(), then poll, wait(), stream, or collect() normalized results correlated by customId. JSONL building/upload, inline submission, and a server-side webhook layer are handled for you.