@ai-sdk/black-forest-labs 2.0.7 → 2.0.9

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @ai-sdk/black-forest-labs
 
+## 2.0.9
+
+### Patch Changes
+
+- 4be62c1: fix(provider-utils): validate provider-response URLs in `getFromApi`
+
+  `getFromApi` now has a `validateUrl` flag. It is optional so existing callers keep compiling (omitting it behaves like `false`, i.e. no validation), but all AI SDK provider packages set it explicitly at every call site so each one makes a visible trust decision. When `true`, the URL is routed through `fetchWithValidatedRedirects` — the same guard used by `downloadBlob` — which rejects private/loopback/link-local targets, re-validates every redirect hop, strips proxy/metadata/cookie request headers, and drops all caller headers except the user-agent on cross-origin redirects (custom API-key headers must not follow a redirect off-origin any more than `Authorization` may); blocked URLs throw `DownloadError`. It is enabled at the image/video/audio download and polling call sites where the URL comes from a provider response body; URLs built from developer-configured endpoints pass `validateUrl: false` and are unaffected.
+
+  A new optional `credentialedOrigin` withholds caller headers unless the URL is same-origin with it, so the API key is not sent to a response-supplied host on a different origin.
+
+  A new optional `trustedOrigin` exempts URLs (and redirect hops) that are same-origin with the developer-configured provider endpoint from target validation, so self-hosted and localhost deployments whose response URLs point back at the configured host keep working; all other hops are still validated.
+
+  Also closes range gaps in `validateDownloadUrl` (IPv4 `224.0.0.0/4` multicast and the TEST-NET documentation ranges `192.0.2.0/24`, `198.51.100.0/24`, `203.0.113.0/24`; IPv6 documentation ranges `2001:db8::/32` and `3fff::/20`), and follows only the fetch-spec redirect status codes (301/302/303/307/308) — a `Location` header on any other status is not followed. This guard performs string/literal checks only and does not resolve DNS; hostnames that resolve to private addresses and DNS rebinding remain out of scope and must be constrained at the network layer (or by injecting a Node `fetch` that pins the resolved IP at connect time) for server deployments handling untrusted URLs. See `contributing/secure-url-handling.md`.
+
+- Updated dependencies [4be62c1]
+- Updated dependencies [7805e4a]
+- Updated dependencies [cd12954]
+  - @ai-sdk/provider-utils@5.0.9
+
+## 2.0.8
+
+### Patch Changes
+
+- Updated dependencies [e193290]
+  - @ai-sdk/provider-utils@5.0.8
+
 ## 2.0.7
 
 ### Patch Changes

package/dist/index.js

@@ -235,6 +235,9 @@ var BlackForestLabsImageModel = class _BlackForestLabsImageModel {
     });
     const { value: imageBytes, responseHeaders } = await getFromApi({
       url: imageUrl,
+      // imageUrl comes from the provider response body; validate it.
+      validateUrl: true,
+      trustedOrigin: this.config.baseURL,
       // Only send credentials if the response-supplied URL points back at the
       // provider; the image is typically delivered from a CDN, so the API key
       // must not travel to a foreign host.
@@ -293,8 +296,10 @@ var BlackForestLabsImageModel = class _BlackForestLabsImageModel {
     for (let i = 0; i < maxPollAttempts; i++) {
       const { value } = await getFromApi({
         url: url.toString(),
-        // The polling URL comes from the provider response; only send
-        // credentials when it stays on a trusted provider host.
+        // The polling URL comes from the provider response; validate it.
+        validateUrl: true,
+        trustedOrigin: this.config.baseURL,
+        // Only send credentials when it stays on a trusted provider host.
         headers: isTrustedUrl(url.toString(), this.config.baseURL) ? headers : void 0,
         failedResponseHandler: bflFailedResponseHandler,
         successfulResponseHandler: createJsonResponseHandler(bflPollSchema),
@@ -415,7 +420,7 @@ function bflErrorToMessage(error) {
 }
 
 // src/version.ts
-var VERSION = true ? "2.0.7" : "0.0.0-test";
+var VERSION = true ? "2.0.9" : "0.0.0-test";
 
 // src/black-forest-labs-provider.ts
 var defaultBaseURL = "https://api.bfl.ai/v1";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/black-forest-labs-provider.ts","../src/black-forest-labs-image-model.ts","../src/black-forest-labs-image-model-options.ts","../src/version.ts"],"sourcesContent":["import {\n  NoSuchModelError,\n  type ImageModelV4,\n  type ProviderV4,\n} from '@ai-sdk/provider';\nimport {\n  loadApiKey,\n  withoutTrailingSlash,\n  withUserAgentSuffix,\n  type FetchFunction,\n} from '@ai-sdk/provider-utils';\nimport { BlackForestLabsImageModel } from './black-forest-labs-image-model';\nimport type { BlackForestLabsImageModelId } from './black-forest-labs-image-settings';\nimport { VERSION } from './version';\n\nexport interface BlackForestLabsProviderSettings {\n  /**\n   * Black Forest Labs API key. Default value is taken from the `BFL_API_KEY` environment variable.\n   */\n  apiKey?: string;\n\n  /**\n   * Base URL for the API calls. Defaults to `https://api.bfl.ai/v1`.\n   */\n  baseURL?: string;\n\n  /**\n   * Custom headers to include in the requests.\n   */\n  headers?: Record<string, string>;\n\n  /**\n   * Custom fetch implementation. You can use it as a middleware to intercept\n   * requests, or to provide a custom fetch implementation for e.g. testing.\n   */\n  fetch?: FetchFunction;\n\n  /**\n   * Poll interval in milliseconds between status checks. Defaults to 500ms.\n   */\n  pollIntervalMillis?: number;\n\n  /**\n   * Overall timeout in milliseconds for polling before giving up. Defaults to 60s.\n   */\n  pollTimeoutMillis?: number;\n}\n\nexport interface BlackForestLabsProvider extends ProviderV4 {\n  /**\n   * Creates a model for image generation.\n   */\n  image(modelId: BlackForestLabsImageModelId): ImageModelV4;\n\n  /**\n   * Creates a model for image generation.\n   */\n  imageModel(modelId: BlackForestLabsImageModelId): ImageModelV4;\n\n  /**\n   * @deprecated Use `embeddingModel` instead.\n   */\n  textEmbeddingModel(modelId: string): never;\n}\n\nconst defaultBaseURL = 'https://api.bfl.ai/v1';\n\nexport function createBlackForestLabs(\n  options: BlackForestLabsProviderSettings = {},\n): BlackForestLabsProvider {\n  const baseURL = withoutTrailingSlash(options.baseURL ?? defaultBaseURL);\n  const getHeaders = () =>\n    withUserAgentSuffix(\n      {\n        'x-key': loadApiKey({\n          apiKey: options.apiKey,\n          environmentVariableName: 'BFL_API_KEY',\n          description: 'Black Forest Labs',\n        }),\n        ...options.headers,\n      },\n      `ai-sdk/black-forest-labs/${VERSION}`,\n    );\n\n  const createImageModel = (modelId: BlackForestLabsImageModelId) =>\n    new BlackForestLabsImageModel(modelId, {\n      provider: 'black-forest-labs.image',\n      baseURL: baseURL ?? defaultBaseURL,\n      headers: getHeaders,\n      fetch: options.fetch,\n      pollIntervalMillis: options.pollIntervalMillis,\n      pollTimeoutMillis: options.pollTimeoutMillis,\n    });\n\n  const embeddingModel = (modelId: string) => {\n    throw new NoSuchModelError({\n      modelId,\n      modelType: 'embeddingModel',\n    });\n  };\n\n  return {\n    specificationVersion: 'v4',\n    imageModel: createImageModel,\n    image: createImageModel,\n    languageModel: (modelId: string) => {\n      throw new NoSuchModelError({\n        modelId,\n        modelType: 'languageModel',\n      });\n    },\n    embeddingModel,\n    textEmbeddingModel: embeddingModel,\n  };\n}\n\nexport const blackForestLabs = createBlackForestLabs();\n","import type { ImageModelV4, SharedV4Warning } from '@ai-sdk/provider';\nimport {\n  combineHeaders,\n  createBinaryResponseHandler,\n  createJsonErrorResponseHandler,\n  createJsonResponseHandler,\n  createStatusCodeErrorResponseHandler,\n  delay,\n  getFromApi,\n  isSameOrigin,\n  parseProviderOptions,\n  postJsonToApi,\n  resolve,\n  serializeModelOptions,\n  WORKFLOW_SERIALIZE,\n  WORKFLOW_DESERIALIZE,\n  type Resolvable,\n  type FetchFunction,\n} from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\nimport { blackForestLabsImageModelOptionsSchema } from './black-forest-labs-image-model-options';\nimport type {\n  BlackForestLabsAspectRatio,\n  BlackForestLabsImageModelId,\n} from './black-forest-labs-image-settings';\n\nconst DEFAULT_POLL_INTERVAL_MILLIS = 500;\nconst DEFAULT_POLL_TIMEOUT_MILLIS = 60000;\n\ninterface BlackForestLabsImageModelConfig {\n  provider: string;\n  baseURL: string;\n  headers?: Resolvable<Record<string, string | undefined>>;\n  fetch?: FetchFunction;\n  /**\n   * Poll interval in milliseconds between status checks. Defaults to 500ms.\n   */\n  pollIntervalMillis?: number;\n  /**\n   * Overall timeout in milliseconds for polling before giving up. Defaults to 60s.\n   */\n  pollTimeoutMillis?: number;\n  _internal?: {\n    currentDate?: () => Date;\n  };\n}\n\nexport class BlackForestLabsImageModel implements ImageModelV4 {\n  readonly specificationVersion = 'v4';\n  readonly maxImagesPerCall = 1;\n\n  get provider(): string {\n    return this.config.provider;\n  }\n\n  static [WORKFLOW_SERIALIZE](model: BlackForestLabsImageModel) {\n    return serializeModelOptions({\n      modelId: model.modelId,\n      config: model.config,\n    });\n  }\n\n  static [WORKFLOW_DESERIALIZE](options: {\n    modelId: BlackForestLabsImageModelId;\n    config: BlackForestLabsImageModelConfig;\n  }) {\n    return new BlackForestLabsImageModel(options.modelId, options.config);\n  }\n\n  constructor(\n    readonly modelId: BlackForestLabsImageModelId,\n    private readonly config: BlackForestLabsImageModelConfig,\n  ) {}\n\n  private async getArgs({\n    prompt,\n    files,\n    mask,\n    size,\n    aspectRatio,\n    seed,\n    providerOptions,\n  }: Parameters<ImageModelV4['doGenerate']>[0]) {\n    const warnings: Array<SharedV4Warning> = [];\n\n    const finalAspectRatio =\n      aspectRatio ?? (size ? convertSizeToAspectRatio(size) : undefined);\n\n    if (size && !aspectRatio) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'size',\n        details:\n          'Deriving aspect_ratio from size. Use the width and height provider options to specify dimensions for models that support them.',\n      });\n    } else if (size && aspectRatio) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'size',\n        details:\n          'Black Forest Labs ignores size when aspectRatio is provided. Use the width and height provider options to specify dimensions for models that support them',\n      });\n    }\n\n    const bflOptions = await parseProviderOptions({\n      provider: 'blackForestLabs',\n      providerOptions,\n      schema: blackForestLabsImageModelOptionsSchema,\n    });\n\n    const [widthStr, heightStr] = size?.split('x') ?? [];\n\n    const inputImages: string[] =\n      files?.map(file => {\n        if (file.type === 'url') {\n          return file.url;\n        }\n\n        if (typeof file.data === 'string') {\n          return file.data;\n        }\n\n        return Buffer.from(file.data).toString('base64');\n      }) || [];\n\n    if (inputImages.length > 10) {\n      throw new Error('Black Forest Labs supports up to 10 input images.');\n    }\n\n    const inputImageField =\n      this.modelId === 'flux-pro-1.0-fill' ? 'image' : 'input_image';\n    const inputImagesObj: Record<string, string> = inputImages.reduce<\n      Record<string, string>\n    >((acc, img, index) => {\n      acc[`${inputImageField}${index === 0 ? '' : `_${index + 1}`}`] = img;\n      return acc;\n    }, {});\n\n    let maskValue: string | undefined;\n    if (mask) {\n      if (mask.type === 'url') {\n        maskValue = mask.url;\n      } else {\n        if (typeof mask.data === 'string') {\n          maskValue = mask.data;\n        } else {\n          maskValue = Buffer.from(mask.data).toString('base64');\n        }\n      }\n    }\n\n    const body: Record<string, unknown> = {\n      prompt,\n      seed,\n      aspect_ratio: finalAspectRatio,\n      width: bflOptions?.width ?? (size ? Number(widthStr) : undefined),\n      height: bflOptions?.height ?? (size ? Number(heightStr) : undefined),\n      steps: bflOptions?.steps,\n      guidance: bflOptions?.guidance,\n      image_prompt_strength: bflOptions?.imagePromptStrength,\n      image_prompt: bflOptions?.imagePrompt,\n      ...inputImagesObj,\n      mask: maskValue,\n      output_format: bflOptions?.outputFormat,\n      prompt_upsampling: bflOptions?.promptUpsampling,\n      raw: bflOptions?.raw,\n      safety_tolerance: bflOptions?.safetyTolerance,\n      webhook_secret: bflOptions?.webhookSecret,\n      webhook_url: bflOptions?.webhookUrl,\n    };\n\n    return { body, warnings, bflOptions };\n  }\n\n  async doGenerate({\n    prompt,\n    files,\n    mask,\n    size,\n    aspectRatio,\n    seed,\n    providerOptions,\n    headers,\n    abortSignal,\n  }: Parameters<ImageModelV4['doGenerate']>[0]): Promise<\n    Awaited<ReturnType<ImageModelV4['doGenerate']>>\n  > {\n    const { body, warnings, bflOptions } = await this.getArgs({\n      prompt,\n      files,\n      mask,\n      size,\n      aspectRatio,\n      seed,\n      providerOptions,\n      n: 1,\n      headers,\n      abortSignal,\n    } as Parameters<ImageModelV4['doGenerate']>[0]);\n\n    const currentDate = this.config._internal?.currentDate?.() ?? new Date();\n    const combinedHeaders = combineHeaders(\n      await resolve(this.config.headers),\n      headers,\n    );\n\n    const submit = await postJsonToApi({\n      url: `${this.config.baseURL}/${this.modelId}`,\n      headers: combinedHeaders,\n      body,\n      failedResponseHandler: bflFailedResponseHandler,\n      successfulResponseHandler: createJsonResponseHandler(bflSubmitSchema),\n      abortSignal,\n      fetch: this.config.fetch,\n    });\n\n    const pollUrl = submit.value.polling_url;\n    const requestId = submit.value.id;\n\n    const {\n      imageUrl,\n      seed: resultSeed,\n      start_time: resultStartTime,\n      end_time: resultEndTime,\n      duration: resultDuration,\n    } = await this.pollForImageUrl({\n      pollUrl,\n      requestId,\n      headers: combinedHeaders,\n      abortSignal,\n      pollOverrides: {\n        pollIntervalMillis: bflOptions?.pollIntervalMillis,\n        pollTimeoutMillis: bflOptions?.pollTimeoutMillis,\n      },\n    });\n\n    const { value: imageBytes, responseHeaders } = await getFromApi({\n      url: imageUrl,\n      // Only send credentials if the response-supplied URL points back at the\n      // provider; the image is typically delivered from a CDN, so the API key\n      // must not travel to a foreign host.\n      headers: isTrustedUrl(imageUrl, this.config.baseURL)\n        ? combinedHeaders\n        : undefined,\n      abortSignal,\n      failedResponseHandler: createStatusCodeErrorResponseHandler(),\n      successfulResponseHandler: createBinaryResponseHandler(),\n      fetch: this.config.fetch,\n    });\n\n    return {\n      images: [imageBytes],\n      warnings,\n      providerMetadata: {\n        blackForestLabs: {\n          images: [\n            {\n              ...(resultSeed != null && { seed: resultSeed }),\n              ...(resultStartTime != null && { start_time: resultStartTime }),\n              ...(resultEndTime != null && { end_time: resultEndTime }),\n              ...(resultDuration != null && { duration: resultDuration }),\n              ...(submit.value.cost != null && { cost: submit.value.cost }),\n              ...(submit.value.input_mp != null && {\n                inputMegapixels: submit.value.input_mp,\n              }),\n              ...(submit.value.output_mp != null && {\n                outputMegapixels: submit.value.output_mp,\n              }),\n            },\n          ],\n        },\n      },\n      response: {\n        modelId: this.modelId,\n        timestamp: currentDate,\n        headers: responseHeaders,\n      },\n    };\n  }\n\n  private async pollForImageUrl({\n    pollUrl,\n    requestId,\n    headers,\n    abortSignal,\n    pollOverrides,\n  }: {\n    pollUrl: string;\n    requestId: string;\n    headers: Record<string, string | undefined>;\n    abortSignal: AbortSignal | undefined;\n    pollOverrides?: {\n      pollIntervalMillis?: number;\n      pollTimeoutMillis?: number;\n    };\n  }): Promise<{\n    imageUrl: string;\n    seed?: number;\n    start_time?: number;\n    end_time?: number;\n    duration?: number;\n  }> {\n    const pollIntervalMillis =\n      pollOverrides?.pollIntervalMillis ??\n      this.config.pollIntervalMillis ??\n      DEFAULT_POLL_INTERVAL_MILLIS;\n    const pollTimeoutMillis =\n      pollOverrides?.pollTimeoutMillis ??\n      this.config.pollTimeoutMillis ??\n      DEFAULT_POLL_TIMEOUT_MILLIS;\n    const maxPollAttempts = Math.ceil(\n      pollTimeoutMillis / Math.max(1, pollIntervalMillis),\n    );\n\n    const url = new URL(pollUrl);\n    if (!url.searchParams.has('id')) {\n      url.searchParams.set('id', requestId);\n    }\n\n    for (let i = 0; i < maxPollAttempts; i++) {\n      const { value } = await getFromApi({\n        url: url.toString(),\n        // The polling URL comes from the provider response; only send\n        // credentials when it stays on a trusted provider host.\n        headers: isTrustedUrl(url.toString(), this.config.baseURL)\n          ? headers\n          : undefined,\n        failedResponseHandler: bflFailedResponseHandler,\n        successfulResponseHandler: createJsonResponseHandler(bflPollSchema),\n        abortSignal,\n        fetch: this.config.fetch,\n      });\n\n      const status = value.status;\n      if (status === 'Ready') {\n        if (typeof value.result?.sample === 'string') {\n          return {\n            imageUrl: value.result.sample,\n            seed: value.result.seed ?? undefined,\n            start_time: value.result.start_time ?? undefined,\n            end_time: value.result.end_time ?? undefined,\n            duration: value.result.duration ?? undefined,\n          };\n        }\n        throw new Error(\n          'Black Forest Labs poll response is Ready but missing result.sample',\n        );\n      }\n      if (status === 'Error' || status === 'Failed') {\n        throw new Error('Black Forest Labs generation failed.');\n      }\n\n      await delay(pollIntervalMillis);\n    }\n\n    throw new Error('Black Forest Labs generation timed out.');\n  }\n}\n\n/**\n * Black Forest Labs returns response-supplied URLs (polling and delivery) on\n * sibling cluster hosts of the API origin (e.g. `api.us1.bfl.ai` for a base\n * URL on `api.bfl.ai`), so a strict same-origin check against the configured\n * base URL is not enough. Credentials may also be sent to any https host under\n * the official `bfl.ai` domain.\n */\nfunction isTrustedUrl(url: string, baseUrl: string): boolean {\n  if (isSameOrigin(url, baseUrl)) {\n    return true;\n  }\n\n  try {\n    const { protocol, hostname } = new URL(url);\n    return (\n      protocol === 'https:' &&\n      (hostname === 'bfl.ai' || hostname.endsWith('.bfl.ai'))\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction convertSizeToAspectRatio(\n  size: string,\n): BlackForestLabsAspectRatio | undefined {\n  const [wStr, hStr] = size.split('x');\n  const width = Number(wStr);\n  const height = Number(hStr);\n  if (\n    !Number.isFinite(width) ||\n    !Number.isFinite(height) ||\n    width <= 0 ||\n    height <= 0\n  ) {\n    return undefined;\n  }\n  const g = gcd(width, height);\n  return `${Math.round(width / g)}:${Math.round(height / g)}`;\n}\n\nfunction gcd(a: number, b: number): number {\n  let x = Math.abs(a);\n  let y = Math.abs(b);\n  while (y !== 0) {\n    const t = y;\n    y = x % y;\n    x = t;\n  }\n  return x;\n}\n\nconst bflSubmitSchema = z.object({\n  id: z.string(),\n  polling_url: z.url(),\n  cost: z.number().nullish(),\n  input_mp: z.number().nullish(),\n  output_mp: z.number().nullish(),\n});\n\nconst bflStatus = z.union([\n  z.literal('Pending'),\n  z.literal('Ready'),\n  z.literal('Error'),\n  z.literal('Failed'),\n  z.literal('Request Moderated'),\n]);\n\nconst bflPollSchema = z\n  .object({\n    status: bflStatus.optional(),\n    state: bflStatus.optional(),\n    details: z.unknown().optional(),\n    result: z\n      .object({\n        sample: z.url(),\n        seed: z.number().optional(),\n        start_time: z.number().optional(),\n        end_time: z.number().optional(),\n        duration: z.number().optional(),\n      })\n      .nullish(),\n  })\n  .refine(v => v.status != null || v.state != null, {\n    message: 'Missing status in Black Forest Labs poll response',\n  })\n  .transform(v => ({\n    status: (v.status ?? v.state)!,\n    result: v.result,\n  }));\n\nconst bflErrorSchema = z.object({\n  message: z.string().optional(),\n  detail: z.any().optional(),\n});\n\nconst bflFailedResponseHandler = createJsonErrorResponseHandler({\n  errorSchema: bflErrorSchema,\n  errorToMessage: error =>\n    bflErrorToMessage(error) ?? 'Unknown Black Forest Labs error',\n});\n\nfunction bflErrorToMessage(error: unknown): string | undefined {\n  const parsed = bflErrorSchema.safeParse(error);\n  if (!parsed.success) return undefined;\n  const { message, detail } = parsed.data;\n  if (typeof detail === 'string') return detail;\n  if (detail != null) {\n    try {\n      return JSON.stringify(detail);\n    } catch {\n      // ignore\n    }\n  }\n  return message;\n}\n","import {\n  lazySchema,\n  zodSchema,\n  type InferSchema,\n} from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\n\nexport const blackForestLabsImageModelOptionsSchema = lazySchema(() =>\n  zodSchema(\n    z.object({\n      imagePrompt: z.string().optional(),\n      imagePromptStrength: z.number().min(0).max(1).optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage2: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage3: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage4: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage5: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage6: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage7: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage8: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage9: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage10: z.string().optional(),\n      steps: z.number().int().positive().optional(),\n      guidance: z.number().min(0).optional(),\n      width: z.number().int().min(256).max(1920).optional(),\n      height: z.number().int().min(256).max(1920).optional(),\n      outputFormat: z.enum(['jpeg', 'png']).optional(),\n      promptUpsampling: z.boolean().optional(),\n      raw: z.boolean().optional(),\n      safetyTolerance: z.number().int().min(0).max(6).optional(),\n      webhookSecret: z.string().optional(),\n      webhookUrl: z.url().optional(),\n      pollIntervalMillis: z.number().int().positive().optional(),\n      pollTimeoutMillis: z.number().int().positive().optional(),\n    }),\n  ),\n);\n\nexport type BlackForestLabsImageModelOptions = InferSchema<\n  typeof blackForestLabsImageModelOptionsSchema\n>;\n","// Version string of this package injected at build time.\ndeclare const __PACKAGE_VERSION__: string | undefined;\nexport const VERSION: string =\n  typeof __PACKAGE_VERSION__ !== 'undefined'\n    ? __PACKAGE_VERSION__\n    : '0.0.0-test';\n"],"mappings":";AAAA;AAAA,EACE;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACTP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,KAAAA,UAAS;;;ACnBlB;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,SAAS;AAEX,IAAM,yCAAyC;AAAA,EAAW,MAC/D;AAAA,IACE,EAAE,OAAO;AAAA,MACP,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,MAEvD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEhC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,MAC5C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,MACpD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,MACrD,cAAc,EAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,SAAS;AAAA,MAC/C,kBAAkB,EAAE,QAAQ,EAAE,SAAS;AAAA,MACvC,KAAK,EAAE,QAAQ,EAAE,SAAS;AAAA,MAC1B,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MACzD,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,MACnC,YAAY,EAAE,IAAI,EAAE,SAAS;AAAA,MAC7B,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,MACzD,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,IAC1D,CAAC;AAAA,EACH;AACF;;;ADpBA,IAAM,+BAA+B;AACrC,IAAM,8BAA8B;AAoB7B,IAAM,4BAAN,MAAM,2BAAkD;AAAA,EAsB7D,YACW,SACQ,QACjB;AAFS;AACQ;AAvBnB,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAAA,EAuBzB;AAAA,EArBH,IAAI,WAAmB;AACrB,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,QAAQ,kBAAkB,EAAE,OAAkC;AAC5D,WAAO,sBAAsB;AAAA,MAC3B,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,QAAQ,oBAAoB,EAAE,SAG3B;AACD,WAAO,IAAI,2BAA0B,QAAQ,SAAS,QAAQ,MAAM;AAAA,EACtE;AAAA,EAOA,MAAc,QAAQ;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAA8C;AAlFhD;AAmFI,UAAM,WAAmC,CAAC;AAE1C,UAAM,mBACJ,oCAAgB,OAAO,yBAAyB,IAAI,IAAI;AAE1D,QAAI,QAAQ,CAAC,aAAa;AACxB,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SACE;AAAA,MACJ,CAAC;AAAA,IACH,WAAW,QAAQ,aAAa;AAC9B,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,MAAM,qBAAqB;AAAA,MAC5C,UAAU;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,CAAC,UAAU,SAAS,KAAI,kCAAM,MAAM,SAAZ,YAAoB,CAAC;AAEnD,UAAM,eACJ,+BAAO,IAAI,UAAQ;AACjB,UAAI,KAAK,SAAS,OAAO;AACvB,eAAO,KAAK;AAAA,MACd;AAEA,UAAI,OAAO,KAAK,SAAS,UAAU;AACjC,eAAO,KAAK;AAAA,MACd;AAEA,aAAO,OAAO,KAAK,KAAK,IAAI,EAAE,SAAS,QAAQ;AAAA,IACjD,OAAM,CAAC;AAET,QAAI,YAAY,SAAS,IAAI;AAC3B,YAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AAEA,UAAM,kBACJ,KAAK,YAAY,sBAAsB,UAAU;AACnD,UAAM,iBAAyC,YAAY,OAEzD,CAAC,KAAK,KAAK,UAAU;AACrB,UAAI,GAAG,eAAe,GAAG,UAAU,IAAI,KAAK,IAAI,QAAQ,CAAC,EAAE,EAAE,IAAI;AACjE,aAAO;AAAA,IACT,GAAG,CAAC,CAAC;AAEL,QAAI;AACJ,QAAI,MAAM;AACR,UAAI,KAAK,SAAS,OAAO;AACvB,oBAAY,KAAK;AAAA,MACnB,OAAO;AACL,YAAI,OAAO,KAAK,SAAS,UAAU;AACjC,sBAAY,KAAK;AAAA,QACnB,OAAO;AACL,sBAAY,OAAO,KAAK,KAAK,IAAI,EAAE,SAAS,QAAQ;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAgC;AAAA,MACpC;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,QAAO,8CAAY,UAAZ,YAAsB,OAAO,OAAO,QAAQ,IAAI;AAAA,MACvD,SAAQ,8CAAY,WAAZ,YAAuB,OAAO,OAAO,SAAS,IAAI;AAAA,MAC1D,OAAO,yCAAY;AAAA,MACnB,UAAU,yCAAY;AAAA,MACtB,uBAAuB,yCAAY;AAAA,MACnC,cAAc,yCAAY;AAAA,MAC1B,GAAG;AAAA,MACH,MAAM;AAAA,MACN,eAAe,yCAAY;AAAA,MAC3B,mBAAmB,yCAAY;AAAA,MAC/B,KAAK,yCAAY;AAAA,MACjB,kBAAkB,yCAAY;AAAA,MAC9B,gBAAgB,yCAAY;AAAA,MAC5B,aAAa,yCAAY;AAAA,IAC3B;AAEA,WAAO,EAAE,MAAM,UAAU,WAAW;AAAA,EACtC;AAAA,EAEA,MAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAEE;AA1LJ;AA2LI,UAAM,EAAE,MAAM,UAAU,WAAW,IAAI,MAAM,KAAK,QAAQ;AAAA,MACxD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,IACF,CAA8C;AAE9C,UAAM,eAAc,sBAAK,OAAO,cAAZ,mBAAuB,gBAAvB,4CAA0C,oBAAI,KAAK;AACvE,UAAM,kBAAkB;AAAA,MACtB,MAAM,QAAQ,KAAK,OAAO,OAAO;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,cAAc;AAAA,MACjC,KAAK,GAAG,KAAK,OAAO,OAAO,IAAI,KAAK,OAAO;AAAA,MAC3C,SAAS;AAAA,MACT;AAAA,MACA,uBAAuB;AAAA,MACvB,2BAA2B,0BAA0B,eAAe;AAAA,MACpE;AAAA,MACA,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,UAAM,UAAU,OAAO,MAAM;AAC7B,UAAM,YAAY,OAAO,MAAM;AAE/B,UAAM;AAAA,MACJ;AAAA,MACA,MAAM;AAAA,MACN,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,IAAI,MAAM,KAAK,gBAAgB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,MACA,eAAe;AAAA,QACb,oBAAoB,yCAAY;AAAA,QAChC,mBAAmB,yCAAY;AAAA,MACjC;AAAA,IACF,CAAC;AAED,UAAM,EAAE,OAAO,YAAY,gBAAgB,IAAI,MAAM,WAAW;AAAA,MAC9D,KAAK;AAAA;AAAA;AAAA;AAAA,MAIL,SAAS,aAAa,UAAU,KAAK,OAAO,OAAO,IAC/C,kBACA;AAAA,MACJ;AAAA,MACA,uBAAuB,qCAAqC;AAAA,MAC5D,2BAA2B,4BAA4B;AAAA,MACvD,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,WAAO;AAAA,MACL,QAAQ,CAAC,UAAU;AAAA,MACnB;AAAA,MACA,kBAAkB;AAAA,QAChB,iBAAiB;AAAA,UACf,QAAQ;AAAA,YACN;AAAA,cACE,GAAI,cAAc,QAAQ,EAAE,MAAM,WAAW;AAAA,cAC7C,GAAI,mBAAmB,QAAQ,EAAE,YAAY,gBAAgB;AAAA,cAC7D,GAAI,iBAAiB,QAAQ,EAAE,UAAU,cAAc;AAAA,cACvD,GAAI,kBAAkB,QAAQ,EAAE,UAAU,eAAe;AAAA,cACzD,GAAI,OAAO,MAAM,QAAQ,QAAQ,EAAE,MAAM,OAAO,MAAM,KAAK;AAAA,cAC3D,GAAI,OAAO,MAAM,YAAY,QAAQ;AAAA,gBACnC,iBAAiB,OAAO,MAAM;AAAA,cAChC;AAAA,cACA,GAAI,OAAO,MAAM,aAAa,QAAQ;AAAA,gBACpC,kBAAkB,OAAO,MAAM;AAAA,cACjC;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,UAAU;AAAA,QACR,SAAS,KAAK;AAAA,QACd,WAAW;AAAA,QACX,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,gBAAgB;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAeG;AA7SL;AA8SI,UAAM,sBACJ,0DAAe,uBAAf,YACA,KAAK,OAAO,uBADZ,YAEA;AACF,UAAM,qBACJ,0DAAe,sBAAf,YACA,KAAK,OAAO,sBADZ,YAEA;AACF,UAAM,kBAAkB,KAAK;AAAA,MAC3B,oBAAoB,KAAK,IAAI,GAAG,kBAAkB;AAAA,IACpD;AAEA,UAAM,MAAM,IAAI,IAAI,OAAO;AAC3B,QAAI,CAAC,IAAI,aAAa,IAAI,IAAI,GAAG;AAC/B,UAAI,aAAa,IAAI,MAAM,SAAS;AAAA,IACtC;AAEA,aAAS,IAAI,GAAG,IAAI,iBAAiB,KAAK;AACxC,YAAM,EAAE,MAAM,IAAI,MAAM,WAAW;AAAA,QACjC,KAAK,IAAI,SAAS;AAAA;AAAA;AAAA,QAGlB,SAAS,aAAa,IAAI,SAAS,GAAG,KAAK,OAAO,OAAO,IACrD,UACA;AAAA,QACJ,uBAAuB;AAAA,QACvB,2BAA2B,0BAA0B,aAAa;AAAA,QAClE;AAAA,QACA,OAAO,KAAK,OAAO;AAAA,MACrB,CAAC;AAED,YAAM,SAAS,MAAM;AACrB,UAAI,WAAW,SAAS;AACtB,YAAI,SAAO,WAAM,WAAN,mBAAc,YAAW,UAAU;AAC5C,iBAAO;AAAA,YACL,UAAU,MAAM,OAAO;AAAA,YACvB,OAAM,WAAM,OAAO,SAAb,YAAqB;AAAA,YAC3B,aAAY,WAAM,OAAO,eAAb,YAA2B;AAAA,YACvC,WAAU,WAAM,OAAO,aAAb,YAAyB;AAAA,YACnC,WAAU,WAAM,OAAO,aAAb,YAAyB;AAAA,UACrC;AAAA,QACF;AACA,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AACA,UAAI,WAAW,WAAW,WAAW,UAAU;AAC7C,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AAEA,YAAM,MAAM,kBAAkB;AAAA,IAChC;AAEA,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACF;AASA,SAAS,aAAa,KAAa,SAA0B;AAC3D,MAAI,aAAa,KAAK,OAAO,GAAG;AAC9B,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,EAAE,UAAU,SAAS,IAAI,IAAI,IAAI,GAAG;AAC1C,WACE,aAAa,aACZ,aAAa,YAAY,SAAS,SAAS,SAAS;AAAA,EAEzD,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,yBACP,MACwC;AACxC,QAAM,CAAC,MAAM,IAAI,IAAI,KAAK,MAAM,GAAG;AACnC,QAAM,QAAQ,OAAO,IAAI;AACzB,QAAM,SAAS,OAAO,IAAI;AAC1B,MACE,CAAC,OAAO,SAAS,KAAK,KACtB,CAAC,OAAO,SAAS,MAAM,KACvB,SAAS,KACT,UAAU,GACV;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI,IAAI,OAAO,MAAM;AAC3B,SAAO,GAAG,KAAK,MAAM,QAAQ,CAAC,CAAC,IAAI,KAAK,MAAM,SAAS,CAAC,CAAC;AAC3D;AAEA,SAAS,IAAI,GAAW,GAAmB;AACzC,MAAI,IAAI,KAAK,IAAI,CAAC;AAClB,MAAI,IAAI,KAAK,IAAI,CAAC;AAClB,SAAO,MAAM,GAAG;AACd,UAAM,IAAI;AACV,QAAI,IAAI;AACR,QAAI;AAAA,EACN;AACA,SAAO;AACT;AAEA,IAAM,kBAAkBC,GAAE,OAAO;AAAA,EAC/B,IAAIA,GAAE,OAAO;AAAA,EACb,aAAaA,GAAE,IAAI;AAAA,EACnB,MAAMA,GAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,UAAUA,GAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,WAAWA,GAAE,OAAO,EAAE,QAAQ;AAChC,CAAC;AAED,IAAM,YAAYA,GAAE,MAAM;AAAA,EACxBA,GAAE,QAAQ,SAAS;AAAA,EACnBA,GAAE,QAAQ,OAAO;AAAA,EACjBA,GAAE,QAAQ,OAAO;AAAA,EACjBA,GAAE,QAAQ,QAAQ;AAAA,EAClBA,GAAE,QAAQ,mBAAmB;AAC/B,CAAC;AAED,IAAM,gBAAgBA,GACnB,OAAO;AAAA,EACN,QAAQ,UAAU,SAAS;AAAA,EAC3B,OAAO,UAAU,SAAS;AAAA,EAC1B,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,QAAQA,GACL,OAAO;AAAA,IACN,QAAQA,GAAE,IAAI;AAAA,IACd,MAAMA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,IAChC,UAAUA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC9B,UAAUA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,CAAC,EACA,QAAQ;AACb,CAAC,EACA,OAAO,OAAK,EAAE,UAAU,QAAQ,EAAE,SAAS,MAAM;AAAA,EAChD,SAAS;AACX,CAAC,EACA,UAAU,OAAE;AA7bf;AA6bmB;AAAA,IACf,SAAS,OAAE,WAAF,YAAY,EAAE;AAAA,IACvB,QAAQ,EAAE;AAAA,EACZ;AAAA,CAAE;AAEJ,IAAM,iBAAiBA,GAAE,OAAO;AAAA,EAC9B,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,QAAQA,GAAE,IAAI,EAAE,SAAS;AAC3B,CAAC;AAED,IAAM,2BAA2B,+BAA+B;AAAA,EAC9D,aAAa;AAAA,EACb,gBAAgB,WAAM;AAzcxB;AA0cI,mCAAkB,KAAK,MAAvB,YAA4B;AAAA;AAChC,CAAC;AAED,SAAS,kBAAkB,OAAoC;AAC7D,QAAM,SAAS,eAAe,UAAU,KAAK;AAC7C,MAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,QAAM,EAAE,SAAS,OAAO,IAAI,OAAO;AACnC,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,MAAI,UAAU,MAAM;AAClB,QAAI;AACF,aAAO,KAAK,UAAU,MAAM;AAAA,IAC9B,SAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;;;AExdO,IAAM,UACX,OACI,UACA;;;AH4DN,IAAM,iBAAiB;AAEhB,SAAS,sBACd,UAA2C,CAAC,GACnB;AArE3B;AAsEE,QAAM,UAAU,sBAAqB,aAAQ,YAAR,YAAmB,cAAc;AACtE,QAAM,aAAa,MACjB;AAAA,IACE;AAAA,MACE,SAAS,WAAW;AAAA,QAClB,QAAQ,QAAQ;AAAA,QAChB,yBAAyB;AAAA,QACzB,aAAa;AAAA,MACf,CAAC;AAAA,MACD,GAAG,QAAQ;AAAA,IACb;AAAA,IACA,4BAA4B,OAAO;AAAA,EACrC;AAEF,QAAM,mBAAmB,CAAC,YACxB,IAAI,0BAA0B,SAAS;AAAA,IACrC,UAAU;AAAA,IACV,SAAS,4BAAW;AAAA,IACpB,SAAS;AAAA,IACT,OAAO,QAAQ;AAAA,IACf,oBAAoB,QAAQ;AAAA,IAC5B,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AAEH,QAAM,iBAAiB,CAAC,YAAoB;AAC1C,UAAM,IAAI,iBAAiB;AAAA,MACzB;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,eAAe,CAAC,YAAoB;AAClC,YAAM,IAAI,iBAAiB;AAAA,QACzB;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AAAA,IACH;AAAA,IACA;AAAA,IACA,oBAAoB;AAAA,EACtB;AACF;AAEO,IAAM,kBAAkB,sBAAsB;","names":["z","z"]}
+{"version":3,"sources":["../src/black-forest-labs-provider.ts","../src/black-forest-labs-image-model.ts","../src/black-forest-labs-image-model-options.ts","../src/version.ts"],"sourcesContent":["import {\n  NoSuchModelError,\n  type ImageModelV4,\n  type ProviderV4,\n} from '@ai-sdk/provider';\nimport {\n  loadApiKey,\n  withoutTrailingSlash,\n  withUserAgentSuffix,\n  type FetchFunction,\n} from '@ai-sdk/provider-utils';\nimport { BlackForestLabsImageModel } from './black-forest-labs-image-model';\nimport type { BlackForestLabsImageModelId } from './black-forest-labs-image-settings';\nimport { VERSION } from './version';\n\nexport interface BlackForestLabsProviderSettings {\n  /**\n   * Black Forest Labs API key. Default value is taken from the `BFL_API_KEY` environment variable.\n   */\n  apiKey?: string;\n\n  /**\n   * Base URL for the API calls. Defaults to `https://api.bfl.ai/v1`.\n   */\n  baseURL?: string;\n\n  /**\n   * Custom headers to include in the requests.\n   */\n  headers?: Record<string, string>;\n\n  /**\n   * Custom fetch implementation. You can use it as a middleware to intercept\n   * requests, or to provide a custom fetch implementation for e.g. testing.\n   */\n  fetch?: FetchFunction;\n\n  /**\n   * Poll interval in milliseconds between status checks. Defaults to 500ms.\n   */\n  pollIntervalMillis?: number;\n\n  /**\n   * Overall timeout in milliseconds for polling before giving up. Defaults to 60s.\n   */\n  pollTimeoutMillis?: number;\n}\n\nexport interface BlackForestLabsProvider extends ProviderV4 {\n  /**\n   * Creates a model for image generation.\n   */\n  image(modelId: BlackForestLabsImageModelId): ImageModelV4;\n\n  /**\n   * Creates a model for image generation.\n   */\n  imageModel(modelId: BlackForestLabsImageModelId): ImageModelV4;\n\n  /**\n   * @deprecated Use `embeddingModel` instead.\n   */\n  textEmbeddingModel(modelId: string): never;\n}\n\nconst defaultBaseURL = 'https://api.bfl.ai/v1';\n\nexport function createBlackForestLabs(\n  options: BlackForestLabsProviderSettings = {},\n): BlackForestLabsProvider {\n  const baseURL = withoutTrailingSlash(options.baseURL ?? defaultBaseURL);\n  const getHeaders = () =>\n    withUserAgentSuffix(\n      {\n        'x-key': loadApiKey({\n          apiKey: options.apiKey,\n          environmentVariableName: 'BFL_API_KEY',\n          description: 'Black Forest Labs',\n        }),\n        ...options.headers,\n      },\n      `ai-sdk/black-forest-labs/${VERSION}`,\n    );\n\n  const createImageModel = (modelId: BlackForestLabsImageModelId) =>\n    new BlackForestLabsImageModel(modelId, {\n      provider: 'black-forest-labs.image',\n      baseURL: baseURL ?? defaultBaseURL,\n      headers: getHeaders,\n      fetch: options.fetch,\n      pollIntervalMillis: options.pollIntervalMillis,\n      pollTimeoutMillis: options.pollTimeoutMillis,\n    });\n\n  const embeddingModel = (modelId: string) => {\n    throw new NoSuchModelError({\n      modelId,\n      modelType: 'embeddingModel',\n    });\n  };\n\n  return {\n    specificationVersion: 'v4',\n    imageModel: createImageModel,\n    image: createImageModel,\n    languageModel: (modelId: string) => {\n      throw new NoSuchModelError({\n        modelId,\n        modelType: 'languageModel',\n      });\n    },\n    embeddingModel,\n    textEmbeddingModel: embeddingModel,\n  };\n}\n\nexport const blackForestLabs = createBlackForestLabs();\n","import type { ImageModelV4, SharedV4Warning } from '@ai-sdk/provider';\nimport {\n  combineHeaders,\n  createBinaryResponseHandler,\n  createJsonErrorResponseHandler,\n  createJsonResponseHandler,\n  createStatusCodeErrorResponseHandler,\n  delay,\n  getFromApi,\n  isSameOrigin,\n  parseProviderOptions,\n  postJsonToApi,\n  resolve,\n  serializeModelOptions,\n  WORKFLOW_SERIALIZE,\n  WORKFLOW_DESERIALIZE,\n  type Resolvable,\n  type FetchFunction,\n} from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\nimport { blackForestLabsImageModelOptionsSchema } from './black-forest-labs-image-model-options';\nimport type {\n  BlackForestLabsAspectRatio,\n  BlackForestLabsImageModelId,\n} from './black-forest-labs-image-settings';\n\nconst DEFAULT_POLL_INTERVAL_MILLIS = 500;\nconst DEFAULT_POLL_TIMEOUT_MILLIS = 60000;\n\ninterface BlackForestLabsImageModelConfig {\n  provider: string;\n  baseURL: string;\n  headers?: Resolvable<Record<string, string | undefined>>;\n  fetch?: FetchFunction;\n  /**\n   * Poll interval in milliseconds between status checks. Defaults to 500ms.\n   */\n  pollIntervalMillis?: number;\n  /**\n   * Overall timeout in milliseconds for polling before giving up. Defaults to 60s.\n   */\n  pollTimeoutMillis?: number;\n  _internal?: {\n    currentDate?: () => Date;\n  };\n}\n\nexport class BlackForestLabsImageModel implements ImageModelV4 {\n  readonly specificationVersion = 'v4';\n  readonly maxImagesPerCall = 1;\n\n  get provider(): string {\n    return this.config.provider;\n  }\n\n  static [WORKFLOW_SERIALIZE](model: BlackForestLabsImageModel) {\n    return serializeModelOptions({\n      modelId: model.modelId,\n      config: model.config,\n    });\n  }\n\n  static [WORKFLOW_DESERIALIZE](options: {\n    modelId: BlackForestLabsImageModelId;\n    config: BlackForestLabsImageModelConfig;\n  }) {\n    return new BlackForestLabsImageModel(options.modelId, options.config);\n  }\n\n  constructor(\n    readonly modelId: BlackForestLabsImageModelId,\n    private readonly config: BlackForestLabsImageModelConfig,\n  ) {}\n\n  private async getArgs({\n    prompt,\n    files,\n    mask,\n    size,\n    aspectRatio,\n    seed,\n    providerOptions,\n  }: Parameters<ImageModelV4['doGenerate']>[0]) {\n    const warnings: Array<SharedV4Warning> = [];\n\n    const finalAspectRatio =\n      aspectRatio ?? (size ? convertSizeToAspectRatio(size) : undefined);\n\n    if (size && !aspectRatio) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'size',\n        details:\n          'Deriving aspect_ratio from size. Use the width and height provider options to specify dimensions for models that support them.',\n      });\n    } else if (size && aspectRatio) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'size',\n        details:\n          'Black Forest Labs ignores size when aspectRatio is provided. Use the width and height provider options to specify dimensions for models that support them',\n      });\n    }\n\n    const bflOptions = await parseProviderOptions({\n      provider: 'blackForestLabs',\n      providerOptions,\n      schema: blackForestLabsImageModelOptionsSchema,\n    });\n\n    const [widthStr, heightStr] = size?.split('x') ?? [];\n\n    const inputImages: string[] =\n      files?.map(file => {\n        if (file.type === 'url') {\n          return file.url;\n        }\n\n        if (typeof file.data === 'string') {\n          return file.data;\n        }\n\n        return Buffer.from(file.data).toString('base64');\n      }) || [];\n\n    if (inputImages.length > 10) {\n      throw new Error('Black Forest Labs supports up to 10 input images.');\n    }\n\n    const inputImageField =\n      this.modelId === 'flux-pro-1.0-fill' ? 'image' : 'input_image';\n    const inputImagesObj: Record<string, string> = inputImages.reduce<\n      Record<string, string>\n    >((acc, img, index) => {\n      acc[`${inputImageField}${index === 0 ? '' : `_${index + 1}`}`] = img;\n      return acc;\n    }, {});\n\n    let maskValue: string | undefined;\n    if (mask) {\n      if (mask.type === 'url') {\n        maskValue = mask.url;\n      } else {\n        if (typeof mask.data === 'string') {\n          maskValue = mask.data;\n        } else {\n          maskValue = Buffer.from(mask.data).toString('base64');\n        }\n      }\n    }\n\n    const body: Record<string, unknown> = {\n      prompt,\n      seed,\n      aspect_ratio: finalAspectRatio,\n      width: bflOptions?.width ?? (size ? Number(widthStr) : undefined),\n      height: bflOptions?.height ?? (size ? Number(heightStr) : undefined),\n      steps: bflOptions?.steps,\n      guidance: bflOptions?.guidance,\n      image_prompt_strength: bflOptions?.imagePromptStrength,\n      image_prompt: bflOptions?.imagePrompt,\n      ...inputImagesObj,\n      mask: maskValue,\n      output_format: bflOptions?.outputFormat,\n      prompt_upsampling: bflOptions?.promptUpsampling,\n      raw: bflOptions?.raw,\n      safety_tolerance: bflOptions?.safetyTolerance,\n      webhook_secret: bflOptions?.webhookSecret,\n      webhook_url: bflOptions?.webhookUrl,\n    };\n\n    return { body, warnings, bflOptions };\n  }\n\n  async doGenerate({\n    prompt,\n    files,\n    mask,\n    size,\n    aspectRatio,\n    seed,\n    providerOptions,\n    headers,\n    abortSignal,\n  }: Parameters<ImageModelV4['doGenerate']>[0]): Promise<\n    Awaited<ReturnType<ImageModelV4['doGenerate']>>\n  > {\n    const { body, warnings, bflOptions } = await this.getArgs({\n      prompt,\n      files,\n      mask,\n      size,\n      aspectRatio,\n      seed,\n      providerOptions,\n      n: 1,\n      headers,\n      abortSignal,\n    } as Parameters<ImageModelV4['doGenerate']>[0]);\n\n    const currentDate = this.config._internal?.currentDate?.() ?? new Date();\n    const combinedHeaders = combineHeaders(\n      await resolve(this.config.headers),\n      headers,\n    );\n\n    const submit = await postJsonToApi({\n      url: `${this.config.baseURL}/${this.modelId}`,\n      headers: combinedHeaders,\n      body,\n      failedResponseHandler: bflFailedResponseHandler,\n      successfulResponseHandler: createJsonResponseHandler(bflSubmitSchema),\n      abortSignal,\n      fetch: this.config.fetch,\n    });\n\n    const pollUrl = submit.value.polling_url;\n    const requestId = submit.value.id;\n\n    const {\n      imageUrl,\n      seed: resultSeed,\n      start_time: resultStartTime,\n      end_time: resultEndTime,\n      duration: resultDuration,\n    } = await this.pollForImageUrl({\n      pollUrl,\n      requestId,\n      headers: combinedHeaders,\n      abortSignal,\n      pollOverrides: {\n        pollIntervalMillis: bflOptions?.pollIntervalMillis,\n        pollTimeoutMillis: bflOptions?.pollTimeoutMillis,\n      },\n    });\n\n    const { value: imageBytes, responseHeaders } = await getFromApi({\n      url: imageUrl,\n      // imageUrl comes from the provider response body; validate it.\n      validateUrl: true,\n      trustedOrigin: this.config.baseURL,\n      // Only send credentials if the response-supplied URL points back at the\n      // provider; the image is typically delivered from a CDN, so the API key\n      // must not travel to a foreign host.\n      headers: isTrustedUrl(imageUrl, this.config.baseURL)\n        ? combinedHeaders\n        : undefined,\n      abortSignal,\n      failedResponseHandler: createStatusCodeErrorResponseHandler(),\n      successfulResponseHandler: createBinaryResponseHandler(),\n      fetch: this.config.fetch,\n    });\n\n    return {\n      images: [imageBytes],\n      warnings,\n      providerMetadata: {\n        blackForestLabs: {\n          images: [\n            {\n              ...(resultSeed != null && { seed: resultSeed }),\n              ...(resultStartTime != null && { start_time: resultStartTime }),\n              ...(resultEndTime != null && { end_time: resultEndTime }),\n              ...(resultDuration != null && { duration: resultDuration }),\n              ...(submit.value.cost != null && { cost: submit.value.cost }),\n              ...(submit.value.input_mp != null && {\n                inputMegapixels: submit.value.input_mp,\n              }),\n              ...(submit.value.output_mp != null && {\n                outputMegapixels: submit.value.output_mp,\n              }),\n            },\n          ],\n        },\n      },\n      response: {\n        modelId: this.modelId,\n        timestamp: currentDate,\n        headers: responseHeaders,\n      },\n    };\n  }\n\n  private async pollForImageUrl({\n    pollUrl,\n    requestId,\n    headers,\n    abortSignal,\n    pollOverrides,\n  }: {\n    pollUrl: string;\n    requestId: string;\n    headers: Record<string, string | undefined>;\n    abortSignal: AbortSignal | undefined;\n    pollOverrides?: {\n      pollIntervalMillis?: number;\n      pollTimeoutMillis?: number;\n    };\n  }): Promise<{\n    imageUrl: string;\n    seed?: number;\n    start_time?: number;\n    end_time?: number;\n    duration?: number;\n  }> {\n    const pollIntervalMillis =\n      pollOverrides?.pollIntervalMillis ??\n      this.config.pollIntervalMillis ??\n      DEFAULT_POLL_INTERVAL_MILLIS;\n    const pollTimeoutMillis =\n      pollOverrides?.pollTimeoutMillis ??\n      this.config.pollTimeoutMillis ??\n      DEFAULT_POLL_TIMEOUT_MILLIS;\n    const maxPollAttempts = Math.ceil(\n      pollTimeoutMillis / Math.max(1, pollIntervalMillis),\n    );\n\n    const url = new URL(pollUrl);\n    if (!url.searchParams.has('id')) {\n      url.searchParams.set('id', requestId);\n    }\n\n    for (let i = 0; i < maxPollAttempts; i++) {\n      const { value } = await getFromApi({\n        url: url.toString(),\n        // The polling URL comes from the provider response; validate it.\n        validateUrl: true,\n        trustedOrigin: this.config.baseURL,\n        // Only send credentials when it stays on a trusted provider host.\n        headers: isTrustedUrl(url.toString(), this.config.baseURL)\n          ? headers\n          : undefined,\n        failedResponseHandler: bflFailedResponseHandler,\n        successfulResponseHandler: createJsonResponseHandler(bflPollSchema),\n        abortSignal,\n        fetch: this.config.fetch,\n      });\n\n      const status = value.status;\n      if (status === 'Ready') {\n        if (typeof value.result?.sample === 'string') {\n          return {\n            imageUrl: value.result.sample,\n            seed: value.result.seed ?? undefined,\n            start_time: value.result.start_time ?? undefined,\n            end_time: value.result.end_time ?? undefined,\n            duration: value.result.duration ?? undefined,\n          };\n        }\n        throw new Error(\n          'Black Forest Labs poll response is Ready but missing result.sample',\n        );\n      }\n      if (status === 'Error' || status === 'Failed') {\n        throw new Error('Black Forest Labs generation failed.');\n      }\n\n      await delay(pollIntervalMillis);\n    }\n\n    throw new Error('Black Forest Labs generation timed out.');\n  }\n}\n\n/**\n * Black Forest Labs returns response-supplied URLs (polling and delivery) on\n * sibling cluster hosts of the API origin (e.g. `api.us1.bfl.ai` for a base\n * URL on `api.bfl.ai`), so a strict same-origin check against the configured\n * base URL is not enough. Credentials may also be sent to any https host under\n * the official `bfl.ai` domain.\n */\nfunction isTrustedUrl(url: string, baseUrl: string): boolean {\n  if (isSameOrigin(url, baseUrl)) {\n    return true;\n  }\n\n  try {\n    const { protocol, hostname } = new URL(url);\n    return (\n      protocol === 'https:' &&\n      (hostname === 'bfl.ai' || hostname.endsWith('.bfl.ai'))\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction convertSizeToAspectRatio(\n  size: string,\n): BlackForestLabsAspectRatio | undefined {\n  const [wStr, hStr] = size.split('x');\n  const width = Number(wStr);\n  const height = Number(hStr);\n  if (\n    !Number.isFinite(width) ||\n    !Number.isFinite(height) ||\n    width <= 0 ||\n    height <= 0\n  ) {\n    return undefined;\n  }\n  const g = gcd(width, height);\n  return `${Math.round(width / g)}:${Math.round(height / g)}`;\n}\n\nfunction gcd(a: number, b: number): number {\n  let x = Math.abs(a);\n  let y = Math.abs(b);\n  while (y !== 0) {\n    const t = y;\n    y = x % y;\n    x = t;\n  }\n  return x;\n}\n\nconst bflSubmitSchema = z.object({\n  id: z.string(),\n  polling_url: z.url(),\n  cost: z.number().nullish(),\n  input_mp: z.number().nullish(),\n  output_mp: z.number().nullish(),\n});\n\nconst bflStatus = z.union([\n  z.literal('Pending'),\n  z.literal('Ready'),\n  z.literal('Error'),\n  z.literal('Failed'),\n  z.literal('Request Moderated'),\n]);\n\nconst bflPollSchema = z\n  .object({\n    status: bflStatus.optional(),\n    state: bflStatus.optional(),\n    details: z.unknown().optional(),\n    result: z\n      .object({\n        sample: z.url(),\n        seed: z.number().optional(),\n        start_time: z.number().optional(),\n        end_time: z.number().optional(),\n        duration: z.number().optional(),\n      })\n      .nullish(),\n  })\n  .refine(v => v.status != null || v.state != null, {\n    message: 'Missing status in Black Forest Labs poll response',\n  })\n  .transform(v => ({\n    status: (v.status ?? v.state)!,\n    result: v.result,\n  }));\n\nconst bflErrorSchema = z.object({\n  message: z.string().optional(),\n  detail: z.any().optional(),\n});\n\nconst bflFailedResponseHandler = createJsonErrorResponseHandler({\n  errorSchema: bflErrorSchema,\n  errorToMessage: error =>\n    bflErrorToMessage(error) ?? 'Unknown Black Forest Labs error',\n});\n\nfunction bflErrorToMessage(error: unknown): string | undefined {\n  const parsed = bflErrorSchema.safeParse(error);\n  if (!parsed.success) return undefined;\n  const { message, detail } = parsed.data;\n  if (typeof detail === 'string') return detail;\n  if (detail != null) {\n    try {\n      return JSON.stringify(detail);\n    } catch {\n      // ignore\n    }\n  }\n  return message;\n}\n","import {\n  lazySchema,\n  zodSchema,\n  type InferSchema,\n} from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\n\nexport const blackForestLabsImageModelOptionsSchema = lazySchema(() =>\n  zodSchema(\n    z.object({\n      imagePrompt: z.string().optional(),\n      imagePromptStrength: z.number().min(0).max(1).optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage2: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage3: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage4: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage5: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage6: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage7: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage8: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage9: z.string().optional(),\n      /** @deprecated use prompt.images instead */\n      inputImage10: z.string().optional(),\n      steps: z.number().int().positive().optional(),\n      guidance: z.number().min(0).optional(),\n      width: z.number().int().min(256).max(1920).optional(),\n      height: z.number().int().min(256).max(1920).optional(),\n      outputFormat: z.enum(['jpeg', 'png']).optional(),\n      promptUpsampling: z.boolean().optional(),\n      raw: z.boolean().optional(),\n      safetyTolerance: z.number().int().min(0).max(6).optional(),\n      webhookSecret: z.string().optional(),\n      webhookUrl: z.url().optional(),\n      pollIntervalMillis: z.number().int().positive().optional(),\n      pollTimeoutMillis: z.number().int().positive().optional(),\n    }),\n  ),\n);\n\nexport type BlackForestLabsImageModelOptions = InferSchema<\n  typeof blackForestLabsImageModelOptionsSchema\n>;\n","// Version string of this package injected at build time.\ndeclare const __PACKAGE_VERSION__: string | undefined;\nexport const VERSION: string =\n  typeof __PACKAGE_VERSION__ !== 'undefined'\n    ? __PACKAGE_VERSION__\n    : '0.0.0-test';\n"],"mappings":";AAAA;AAAA,EACE;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACTP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,KAAAA,UAAS;;;ACnBlB;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,SAAS;AAEX,IAAM,yCAAyC;AAAA,EAAW,MAC/D;AAAA,IACE,EAAE,OAAO;AAAA,MACP,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,MAEvD,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEhC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,MAEjC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,MAC5C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,MACpD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,MACrD,cAAc,EAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,SAAS;AAAA,MAC/C,kBAAkB,EAAE,QAAQ,EAAE,SAAS;AAAA,MACvC,KAAK,EAAE,QAAQ,EAAE,SAAS;AAAA,MAC1B,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MACzD,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,MACnC,YAAY,EAAE,IAAI,EAAE,SAAS;AAAA,MAC7B,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,MACzD,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,IAC1D,CAAC;AAAA,EACH;AACF;;;ADpBA,IAAM,+BAA+B;AACrC,IAAM,8BAA8B;AAoB7B,IAAM,4BAAN,MAAM,2BAAkD;AAAA,EAsB7D,YACW,SACQ,QACjB;AAFS;AACQ;AAvBnB,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAAA,EAuBzB;AAAA,EArBH,IAAI,WAAmB;AACrB,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,QAAQ,kBAAkB,EAAE,OAAkC;AAC5D,WAAO,sBAAsB;AAAA,MAC3B,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,QAAQ,oBAAoB,EAAE,SAG3B;AACD,WAAO,IAAI,2BAA0B,QAAQ,SAAS,QAAQ,MAAM;AAAA,EACtE;AAAA,EAOA,MAAc,QAAQ;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAA8C;AAlFhD;AAmFI,UAAM,WAAmC,CAAC;AAE1C,UAAM,mBACJ,oCAAgB,OAAO,yBAAyB,IAAI,IAAI;AAE1D,QAAI,QAAQ,CAAC,aAAa;AACxB,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SACE;AAAA,MACJ,CAAC;AAAA,IACH,WAAW,QAAQ,aAAa;AAC9B,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,MAAM,qBAAqB;AAAA,MAC5C,UAAU;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,IACV,CAAC;AAED,UAAM,CAAC,UAAU,SAAS,KAAI,kCAAM,MAAM,SAAZ,YAAoB,CAAC;AAEnD,UAAM,eACJ,+BAAO,IAAI,UAAQ;AACjB,UAAI,KAAK,SAAS,OAAO;AACvB,eAAO,KAAK;AAAA,MACd;AAEA,UAAI,OAAO,KAAK,SAAS,UAAU;AACjC,eAAO,KAAK;AAAA,MACd;AAEA,aAAO,OAAO,KAAK,KAAK,IAAI,EAAE,SAAS,QAAQ;AAAA,IACjD,OAAM,CAAC;AAET,QAAI,YAAY,SAAS,IAAI;AAC3B,YAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AAEA,UAAM,kBACJ,KAAK,YAAY,sBAAsB,UAAU;AACnD,UAAM,iBAAyC,YAAY,OAEzD,CAAC,KAAK,KAAK,UAAU;AACrB,UAAI,GAAG,eAAe,GAAG,UAAU,IAAI,KAAK,IAAI,QAAQ,CAAC,EAAE,EAAE,IAAI;AACjE,aAAO;AAAA,IACT,GAAG,CAAC,CAAC;AAEL,QAAI;AACJ,QAAI,MAAM;AACR,UAAI,KAAK,SAAS,OAAO;AACvB,oBAAY,KAAK;AAAA,MACnB,OAAO;AACL,YAAI,OAAO,KAAK,SAAS,UAAU;AACjC,sBAAY,KAAK;AAAA,QACnB,OAAO;AACL,sBAAY,OAAO,KAAK,KAAK,IAAI,EAAE,SAAS,QAAQ;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAgC;AAAA,MACpC;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,QAAO,8CAAY,UAAZ,YAAsB,OAAO,OAAO,QAAQ,IAAI;AAAA,MACvD,SAAQ,8CAAY,WAAZ,YAAuB,OAAO,OAAO,SAAS,IAAI;AAAA,MAC1D,OAAO,yCAAY;AAAA,MACnB,UAAU,yCAAY;AAAA,MACtB,uBAAuB,yCAAY;AAAA,MACnC,cAAc,yCAAY;AAAA,MAC1B,GAAG;AAAA,MACH,MAAM;AAAA,MACN,eAAe,yCAAY;AAAA,MAC3B,mBAAmB,yCAAY;AAAA,MAC/B,KAAK,yCAAY;AAAA,MACjB,kBAAkB,yCAAY;AAAA,MAC9B,gBAAgB,yCAAY;AAAA,MAC5B,aAAa,yCAAY;AAAA,IAC3B;AAEA,WAAO,EAAE,MAAM,UAAU,WAAW;AAAA,EACtC;AAAA,EAEA,MAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAEE;AA1LJ;AA2LI,UAAM,EAAE,MAAM,UAAU,WAAW,IAAI,MAAM,KAAK,QAAQ;AAAA,MACxD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,IACF,CAA8C;AAE9C,UAAM,eAAc,sBAAK,OAAO,cAAZ,mBAAuB,gBAAvB,4CAA0C,oBAAI,KAAK;AACvE,UAAM,kBAAkB;AAAA,MACtB,MAAM,QAAQ,KAAK,OAAO,OAAO;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,cAAc;AAAA,MACjC,KAAK,GAAG,KAAK,OAAO,OAAO,IAAI,KAAK,OAAO;AAAA,MAC3C,SAAS;AAAA,MACT;AAAA,MACA,uBAAuB;AAAA,MACvB,2BAA2B,0BAA0B,eAAe;AAAA,MACpE;AAAA,MACA,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,UAAM,UAAU,OAAO,MAAM;AAC7B,UAAM,YAAY,OAAO,MAAM;AAE/B,UAAM;AAAA,MACJ;AAAA,MACA,MAAM;AAAA,MACN,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,IAAI,MAAM,KAAK,gBAAgB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,MACA,eAAe;AAAA,QACb,oBAAoB,yCAAY;AAAA,QAChC,mBAAmB,yCAAY;AAAA,MACjC;AAAA,IACF,CAAC;AAED,UAAM,EAAE,OAAO,YAAY,gBAAgB,IAAI,MAAM,WAAW;AAAA,MAC9D,KAAK;AAAA;AAAA,MAEL,aAAa;AAAA,MACb,eAAe,KAAK,OAAO;AAAA;AAAA;AAAA;AAAA,MAI3B,SAAS,aAAa,UAAU,KAAK,OAAO,OAAO,IAC/C,kBACA;AAAA,MACJ;AAAA,MACA,uBAAuB,qCAAqC;AAAA,MAC5D,2BAA2B,4BAA4B;AAAA,MACvD,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,WAAO;AAAA,MACL,QAAQ,CAAC,UAAU;AAAA,MACnB;AAAA,MACA,kBAAkB;AAAA,QAChB,iBAAiB;AAAA,UACf,QAAQ;AAAA,YACN;AAAA,cACE,GAAI,cAAc,QAAQ,EAAE,MAAM,WAAW;AAAA,cAC7C,GAAI,mBAAmB,QAAQ,EAAE,YAAY,gBAAgB;AAAA,cAC7D,GAAI,iBAAiB,QAAQ,EAAE,UAAU,cAAc;AAAA,cACvD,GAAI,kBAAkB,QAAQ,EAAE,UAAU,eAAe;AAAA,cACzD,GAAI,OAAO,MAAM,QAAQ,QAAQ,EAAE,MAAM,OAAO,MAAM,KAAK;AAAA,cAC3D,GAAI,OAAO,MAAM,YAAY,QAAQ;AAAA,gBACnC,iBAAiB,OAAO,MAAM;AAAA,cAChC;AAAA,cACA,GAAI,OAAO,MAAM,aAAa,QAAQ;AAAA,gBACpC,kBAAkB,OAAO,MAAM;AAAA,cACjC;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,UAAU;AAAA,QACR,SAAS,KAAK;AAAA,QACd,WAAW;AAAA,QACX,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,gBAAgB;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAeG;AAhTL;AAiTI,UAAM,sBACJ,0DAAe,uBAAf,YACA,KAAK,OAAO,uBADZ,YAEA;AACF,UAAM,qBACJ,0DAAe,sBAAf,YACA,KAAK,OAAO,sBADZ,YAEA;AACF,UAAM,kBAAkB,KAAK;AAAA,MAC3B,oBAAoB,KAAK,IAAI,GAAG,kBAAkB;AAAA,IACpD;AAEA,UAAM,MAAM,IAAI,IAAI,OAAO;AAC3B,QAAI,CAAC,IAAI,aAAa,IAAI,IAAI,GAAG;AAC/B,UAAI,aAAa,IAAI,MAAM,SAAS;AAAA,IACtC;AAEA,aAAS,IAAI,GAAG,IAAI,iBAAiB,KAAK;AACxC,YAAM,EAAE,MAAM,IAAI,MAAM,WAAW;AAAA,QACjC,KAAK,IAAI,SAAS;AAAA;AAAA,QAElB,aAAa;AAAA,QACb,eAAe,KAAK,OAAO;AAAA;AAAA,QAE3B,SAAS,aAAa,IAAI,SAAS,GAAG,KAAK,OAAO,OAAO,IACrD,UACA;AAAA,QACJ,uBAAuB;AAAA,QACvB,2BAA2B,0BAA0B,aAAa;AAAA,QAClE;AAAA,QACA,OAAO,KAAK,OAAO;AAAA,MACrB,CAAC;AAED,YAAM,SAAS,MAAM;AACrB,UAAI,WAAW,SAAS;AACtB,YAAI,SAAO,WAAM,WAAN,mBAAc,YAAW,UAAU;AAC5C,iBAAO;AAAA,YACL,UAAU,MAAM,OAAO;AAAA,YACvB,OAAM,WAAM,OAAO,SAAb,YAAqB;AAAA,YAC3B,aAAY,WAAM,OAAO,eAAb,YAA2B;AAAA,YACvC,WAAU,WAAM,OAAO,aAAb,YAAyB;AAAA,YACnC,WAAU,WAAM,OAAO,aAAb,YAAyB;AAAA,UACrC;AAAA,QACF;AACA,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AACA,UAAI,WAAW,WAAW,WAAW,UAAU;AAC7C,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AAEA,YAAM,MAAM,kBAAkB;AAAA,IAChC;AAEA,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACF;AASA,SAAS,aAAa,KAAa,SAA0B;AAC3D,MAAI,aAAa,KAAK,OAAO,GAAG;AAC9B,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,EAAE,UAAU,SAAS,IAAI,IAAI,IAAI,GAAG;AAC1C,WACE,aAAa,aACZ,aAAa,YAAY,SAAS,SAAS,SAAS;AAAA,EAEzD,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,yBACP,MACwC;AACxC,QAAM,CAAC,MAAM,IAAI,IAAI,KAAK,MAAM,GAAG;AACnC,QAAM,QAAQ,OAAO,IAAI;AACzB,QAAM,SAAS,OAAO,IAAI;AAC1B,MACE,CAAC,OAAO,SAAS,KAAK,KACtB,CAAC,OAAO,SAAS,MAAM,KACvB,SAAS,KACT,UAAU,GACV;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI,IAAI,OAAO,MAAM;AAC3B,SAAO,GAAG,KAAK,MAAM,QAAQ,CAAC,CAAC,IAAI,KAAK,MAAM,SAAS,CAAC,CAAC;AAC3D;AAEA,SAAS,IAAI,GAAW,GAAmB;AACzC,MAAI,IAAI,KAAK,IAAI,CAAC;AAClB,MAAI,IAAI,KAAK,IAAI,CAAC;AAClB,SAAO,MAAM,GAAG;AACd,UAAM,IAAI;AACV,QAAI,IAAI;AACR,QAAI;AAAA,EACN;AACA,SAAO;AACT;AAEA,IAAM,kBAAkBC,GAAE,OAAO;AAAA,EAC/B,IAAIA,GAAE,OAAO;AAAA,EACb,aAAaA,GAAE,IAAI;AAAA,EACnB,MAAMA,GAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,UAAUA,GAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,WAAWA,GAAE,OAAO,EAAE,QAAQ;AAChC,CAAC;AAED,IAAM,YAAYA,GAAE,MAAM;AAAA,EACxBA,GAAE,QAAQ,SAAS;AAAA,EACnBA,GAAE,QAAQ,OAAO;AAAA,EACjBA,GAAE,QAAQ,OAAO;AAAA,EACjBA,GAAE,QAAQ,QAAQ;AAAA,EAClBA,GAAE,QAAQ,mBAAmB;AAC/B,CAAC;AAED,IAAM,gBAAgBA,GACnB,OAAO;AAAA,EACN,QAAQ,UAAU,SAAS;AAAA,EAC3B,OAAO,UAAU,SAAS;AAAA,EAC1B,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,QAAQA,GACL,OAAO;AAAA,IACN,QAAQA,GAAE,IAAI;AAAA,IACd,MAAMA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,IAChC,UAAUA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC9B,UAAUA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,CAAC,EACA,QAAQ;AACb,CAAC,EACA,OAAO,OAAK,EAAE,UAAU,QAAQ,EAAE,SAAS,MAAM;AAAA,EAChD,SAAS;AACX,CAAC,EACA,UAAU,OAAE;AAlcf;AAkcmB;AAAA,IACf,SAAS,OAAE,WAAF,YAAY,EAAE;AAAA,IACvB,QAAQ,EAAE;AAAA,EACZ;AAAA,CAAE;AAEJ,IAAM,iBAAiBA,GAAE,OAAO;AAAA,EAC9B,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,QAAQA,GAAE,IAAI,EAAE,SAAS;AAC3B,CAAC;AAED,IAAM,2BAA2B,+BAA+B;AAAA,EAC9D,aAAa;AAAA,EACb,gBAAgB,WAAM;AA9cxB;AA+cI,mCAAkB,KAAK,MAAvB,YAA4B;AAAA;AAChC,CAAC;AAED,SAAS,kBAAkB,OAAoC;AAC7D,QAAM,SAAS,eAAe,UAAU,KAAK;AAC7C,MAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,QAAM,EAAE,SAAS,OAAO,IAAI,OAAO;AACnC,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,MAAI,UAAU,MAAM;AAClB,QAAI;AACF,aAAO,KAAK,UAAU,MAAM;AAAA,IAC9B,SAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;;;AE7dO,IAAM,UACX,OACI,UACA;;;AH4DN,IAAM,iBAAiB;AAEhB,SAAS,sBACd,UAA2C,CAAC,GACnB;AArE3B;AAsEE,QAAM,UAAU,sBAAqB,aAAQ,YAAR,YAAmB,cAAc;AACtE,QAAM,aAAa,MACjB;AAAA,IACE;AAAA,MACE,SAAS,WAAW;AAAA,QAClB,QAAQ,QAAQ;AAAA,QAChB,yBAAyB;AAAA,QACzB,aAAa;AAAA,MACf,CAAC;AAAA,MACD,GAAG,QAAQ;AAAA,IACb;AAAA,IACA,4BAA4B,OAAO;AAAA,EACrC;AAEF,QAAM,mBAAmB,CAAC,YACxB,IAAI,0BAA0B,SAAS;AAAA,IACrC,UAAU;AAAA,IACV,SAAS,4BAAW;AAAA,IACpB,SAAS;AAAA,IACT,OAAO,QAAQ;AAAA,IACf,oBAAoB,QAAQ;AAAA,IAC5B,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AAEH,QAAM,iBAAiB,CAAC,YAAoB;AAC1C,UAAM,IAAI,iBAAiB;AAAA,MACzB;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,eAAe,CAAC,YAAoB;AAClC,YAAM,IAAI,iBAAiB;AAAA,QACzB;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AAAA,IACH;AAAA,IACA;AAAA,IACA,oBAAoB;AAAA,EACtB;AACF;AAEO,IAAM,kBAAkB,sBAAsB;","names":["z","z"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdk/black-forest-labs",
-  "version": "2.0.7",
+  "version": "2.0.9",
   "type": "module",
   "license": "Apache-2.0",
   "sideEffects": false,
@@ -29,7 +29,7 @@
   },
   "dependencies": {
     "@ai-sdk/provider": "4.0.3",
-    "@ai-sdk/provider-utils": "5.0.7"
+    "@ai-sdk/provider-utils": "5.0.9"
   },
   "devDependencies": {
     "@types/node": "22.19.19",

package/src/black-forest-labs-image-model.ts

@@ -236,6 +236,9 @@ export class BlackForestLabsImageModel implements ImageModelV4 {
 
     const { value: imageBytes, responseHeaders } = await getFromApi({
       url: imageUrl,
+      // imageUrl comes from the provider response body; validate it.
+      validateUrl: true,
+      trustedOrigin: this.config.baseURL,
       // Only send credentials if the response-supplied URL points back at the
       // provider; the image is typically delivered from a CDN, so the API key
       // must not travel to a foreign host.
@@ -320,8 +323,10 @@ export class BlackForestLabsImageModel implements ImageModelV4 {
     for (let i = 0; i < maxPollAttempts; i++) {
       const { value } = await getFromApi({
         url: url.toString(),
-        // The polling URL comes from the provider response; only send
-        // credentials when it stays on a trusted provider host.
+        // The polling URL comes from the provider response; validate it.
+        validateUrl: true,
+        trustedOrigin: this.config.baseURL,
+        // Only send credentials when it stays on a trusted provider host.
         headers: isTrustedUrl(url.toString(), this.config.baseURL)
           ? headers
           : undefined,