@ai-sdk/fireworks 3.0.0-canary.55 → 3.0.0-canary.56

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @ai-sdk/fireworks
 
+## 3.0.0-canary.56
+
+### Patch Changes
+
+- aeda373: fix: only send provider credentials to same-origin response-supplied URLs
+
+  Several provider clients followed a URL taken from the provider's API response (a polling/status URL or a final media URL such as `polling_url`, `urls.get`, `result_url`, `result.sample`, or `video.uri`) and reused the authenticated headers — or appended `?key=<API_KEY>` — on that request. Because the host of the response-supplied URL was never validated, the long-lived API key was sent to whatever host the response named (a CDN in the benign case, or an attacker-chosen host if the provider response was tampered with), allowing credential exfiltration.
+
+  A new `isSameOrigin` helper is added to `@ai-sdk/provider-utils`, and the affected fetches in `@ai-sdk/black-forest-labs`, `@ai-sdk/fireworks`, `@ai-sdk/replicate`, `@ai-sdk/gladia`, `@ai-sdk/fal`, and `@ai-sdk/google` now attach credentials only when the followed URL is same-origin with the provider's configured API origin. Requests to a foreign origin are made without the credential.
+
+- Updated dependencies [aeda373]
+- Updated dependencies [375fdd7]
+- Updated dependencies [b4507d5]
+  - @ai-sdk/provider-utils@5.0.0-canary.48
+  - @ai-sdk/openai-compatible@3.0.0-canary.56
+
 ## 3.0.0-canary.55
 
 ### Patch Changes

package/dist/index.js

@@ -7,6 +7,7 @@ import {
   createStatusCodeErrorResponseHandler,
   delay,
   getFromApi,
+  isSameOrigin,
   postJsonToApi,
   serializeModelOptions,
   WORKFLOW_SERIALIZE,
@@ -225,7 +226,7 @@ var FireworksImageModel = class _FireworksImageModel {
     });
     const { value: imageBytes, responseHeaders } = await getFromApi({
       url: imageUrl,
-      headers,
+      headers: isSameOrigin(imageUrl, this.config.baseURL) ? headers : void 0,
       abortSignal,
       failedResponseHandler: createStatusCodeErrorResponseHandler(),
       successfulResponseHandler: createBinaryResponseHandler(),
@@ -305,7 +306,7 @@ import {
 import { z as z2 } from "zod/v4";
 
 // src/version.ts
-var VERSION = true ? "3.0.0-canary.55" : "0.0.0-test";
+var VERSION = true ? "3.0.0-canary.56" : "0.0.0-test";
 
 // src/fireworks-provider.ts
 var fireworksErrorSchema = z2.object({

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/fireworks-image-model.ts","../src/fireworks-image-api.ts","../src/fireworks-provider.ts","../src/version.ts"],"sourcesContent":["import type { ImageModelV4, SharedV4Warning } from '@ai-sdk/provider';\nimport {\n  combineHeaders,\n  convertImageModelFileToDataUri,\n  createBinaryResponseHandler,\n  createJsonResponseHandler,\n  createStatusCodeErrorResponseHandler,\n  delay,\n  getFromApi,\n  postJsonToApi,\n  serializeModelOptions,\n  WORKFLOW_SERIALIZE,\n  WORKFLOW_DESERIALIZE,\n  type FetchFunction,\n} from '@ai-sdk/provider-utils';\nimport {\n  asyncPollResponseSchema,\n  asyncSubmitResponseSchema,\n} from './fireworks-image-api';\nimport type { FireworksImageModelId } from './fireworks-image-options';\n\nconst DEFAULT_POLL_INTERVAL_MILLIS = 500;\nconst DEFAULT_POLL_TIMEOUT_MILLIS = 120000; // 2 minutes for image generation\n\ninterface FireworksImageModelBackendConfig {\n  urlFormat: 'workflows' | 'workflows_async' | 'image_generation';\n  supportsSize?: boolean;\n  supportsEditing?: boolean;\n}\n\nconst modelToBackendConfig: Partial<\n  Record<FireworksImageModelId, FireworksImageModelBackendConfig>\n> = {\n  'accounts/fireworks/models/flux-1-dev-fp8': {\n    urlFormat: 'workflows',\n  },\n  'accounts/fireworks/models/flux-1-schnell-fp8': {\n    urlFormat: 'workflows',\n  },\n  'accounts/fireworks/models/flux-kontext-pro': {\n    urlFormat: 'workflows_async',\n    supportsEditing: true,\n  },\n  'accounts/fireworks/models/flux-kontext-max': {\n    urlFormat: 'workflows_async',\n    supportsEditing: true,\n  },\n  'accounts/fireworks/models/playground-v2-5-1024px-aesthetic': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n  'accounts/fireworks/models/japanese-stable-diffusion-xl': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n  'accounts/fireworks/models/playground-v2-1024px-aesthetic': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n  'accounts/fireworks/models/stable-diffusion-xl-1024-v1-0': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n  'accounts/fireworks/models/SSD-1B': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n};\n\nfunction getUrlForModel(\n  baseUrl: string,\n  modelId: FireworksImageModelId,\n): string {\n  const config = modelToBackendConfig[modelId];\n\n  switch (config?.urlFormat) {\n    case 'image_generation':\n      return `${baseUrl}/image_generation/${modelId}`;\n    case 'workflows_async':\n      return `${baseUrl}/workflows/${modelId}`;\n    case 'workflows':\n    default:\n      return `${baseUrl}/workflows/${modelId}/text_to_image`;\n  }\n}\n\nfunction getPollUrlForModel(\n  baseUrl: string,\n  modelId: FireworksImageModelId,\n): string {\n  return `${baseUrl}/workflows/${modelId}/get_result`;\n}\n\ninterface FireworksImageModelConfig {\n  provider: string;\n  baseURL: string;\n  headers?: () => Record<string, string>;\n  fetch?: FetchFunction;\n  /**\n   * Poll interval in milliseconds between status checks for async models.\n   * Defaults to 500ms.\n   */\n  pollIntervalMillis?: number;\n  /**\n   * Overall timeout in milliseconds for polling before giving up.\n   * Defaults to 120000ms (2 minutes).\n   */\n  pollTimeoutMillis?: number;\n  _internal?: {\n    currentDate?: () => Date;\n  };\n}\n\nexport class FireworksImageModel implements ImageModelV4 {\n  readonly specificationVersion = 'v4';\n  readonly maxImagesPerCall = 1;\n\n  get provider(): string {\n    return this.config.provider;\n  }\n\n  static [WORKFLOW_SERIALIZE](model: FireworksImageModel) {\n    return serializeModelOptions({\n      modelId: model.modelId,\n      config: model.config,\n    });\n  }\n\n  static [WORKFLOW_DESERIALIZE](options: {\n    modelId: FireworksImageModelId;\n    config: FireworksImageModelConfig;\n  }) {\n    return new FireworksImageModel(options.modelId, options.config);\n  }\n\n  constructor(\n    readonly modelId: FireworksImageModelId,\n    private config: FireworksImageModelConfig,\n  ) {}\n\n  async doGenerate({\n    prompt,\n    n,\n    size,\n    aspectRatio,\n    seed,\n    providerOptions,\n    headers,\n    abortSignal,\n    files,\n    mask,\n  }: Parameters<ImageModelV4['doGenerate']>[0]): Promise<\n    Awaited<ReturnType<ImageModelV4['doGenerate']>>\n  > {\n    const warnings: Array<SharedV4Warning> = [];\n\n    const backendConfig = modelToBackendConfig[this.modelId];\n    if (!backendConfig?.supportsSize && size != null) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'size',\n        details:\n          'This model does not support the `size` option. Use `aspectRatio` instead.',\n      });\n    }\n\n    // Use supportsSize as a proxy for whether the model does not support\n    // aspectRatio. This invariant holds for the current set of models.\n    if (backendConfig?.supportsSize && aspectRatio != null) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'aspectRatio',\n        details: 'This model does not support the `aspectRatio` option.',\n      });\n    }\n\n    // Handle files for image editing\n    const hasInputImage = files != null && files.length > 0;\n    let inputImage: string | undefined;\n\n    if (hasInputImage) {\n      inputImage = convertImageModelFileToDataUri(files[0]);\n\n      if (files.length > 1) {\n        warnings.push({\n          type: 'other',\n          message:\n            'Fireworks only supports a single input image. Additional images are ignored.',\n        });\n      }\n    }\n\n    // Warn about mask - Fireworks Kontext models don't support explicit masks\n    if (mask != null) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'mask',\n        details:\n          'Fireworks Kontext models do not support explicit masks. Use the prompt to describe the areas to edit.',\n      });\n    }\n\n    const splitSize = size?.split('x');\n    const currentDate = this.config._internal?.currentDate?.() ?? new Date();\n    const combinedHeaders = combineHeaders(this.config.headers?.(), headers);\n\n    const body = {\n      prompt,\n      aspect_ratio: aspectRatio,\n      seed,\n      samples: n,\n      ...(inputImage && { input_image: inputImage }),\n      ...(splitSize && { width: splitSize[0], height: splitSize[1] }),\n      ...(providerOptions.fireworks ?? {}),\n    };\n\n    // Handle async models that require polling (e.g., flux-kontext-*)\n    if (backendConfig?.urlFormat === 'workflows_async') {\n      return this.doGenerateAsync({\n        body,\n        headers: combinedHeaders,\n        abortSignal,\n        warnings,\n        currentDate,\n      });\n    }\n\n    // Handle sync models that return binary directly\n    const { value: response, responseHeaders } = await postJsonToApi({\n      url: getUrlForModel(this.config.baseURL, this.modelId),\n      headers: combinedHeaders,\n      body,\n      failedResponseHandler: createStatusCodeErrorResponseHandler(),\n      successfulResponseHandler: createBinaryResponseHandler(),\n      abortSignal,\n      fetch: this.config.fetch,\n    });\n\n    return {\n      images: [response],\n      warnings,\n      response: {\n        timestamp: currentDate,\n        modelId: this.modelId,\n        headers: responseHeaders,\n      },\n    };\n  }\n\n  /**\n   * Handles async image generation for models like flux-kontext-* that return\n   * a request_id and require polling for results.\n   */\n  private async doGenerateAsync({\n    body,\n    headers,\n    abortSignal,\n    warnings,\n    currentDate,\n  }: {\n    body: Record<string, unknown>;\n    headers: Record<string, string | undefined>;\n    abortSignal: AbortSignal | undefined;\n    warnings: Array<SharedV4Warning>;\n    currentDate: Date;\n  }): Promise<Awaited<ReturnType<ImageModelV4['doGenerate']>>> {\n    // Submit the generation request\n    const { value: submitResponse } = await postJsonToApi({\n      url: getUrlForModel(this.config.baseURL, this.modelId),\n      headers,\n      body,\n      failedResponseHandler: createStatusCodeErrorResponseHandler(),\n      successfulResponseHandler: createJsonResponseHandler(\n        asyncSubmitResponseSchema,\n      ),\n      abortSignal,\n      fetch: this.config.fetch,\n    });\n\n    const requestId = submitResponse.request_id;\n\n    // Poll for the result\n    const imageUrl = await this.pollForImageUrl({\n      requestId,\n      headers,\n      abortSignal,\n    });\n\n    // Download the image from the URL\n    const { value: imageBytes, responseHeaders } = await getFromApi({\n      url: imageUrl,\n      headers,\n      abortSignal,\n      failedResponseHandler: createStatusCodeErrorResponseHandler(),\n      successfulResponseHandler: createBinaryResponseHandler(),\n      fetch: this.config.fetch,\n    });\n\n    return {\n      images: [imageBytes],\n      warnings,\n      response: {\n        timestamp: currentDate,\n        modelId: this.modelId,\n        headers: responseHeaders,\n      },\n    };\n  }\n\n  /**\n   * Polls the get_result endpoint until the image is ready.\n   */\n  private async pollForImageUrl({\n    requestId,\n    headers,\n    abortSignal,\n  }: {\n    requestId: string;\n    headers: Record<string, string | undefined>;\n    abortSignal: AbortSignal | undefined;\n  }): Promise<string> {\n    const pollIntervalMillis =\n      this.config.pollIntervalMillis ?? DEFAULT_POLL_INTERVAL_MILLIS;\n    const pollTimeoutMillis =\n      this.config.pollTimeoutMillis ?? DEFAULT_POLL_TIMEOUT_MILLIS;\n    const maxPollAttempts = Math.ceil(\n      pollTimeoutMillis / Math.max(1, pollIntervalMillis),\n    );\n\n    const pollUrl = getPollUrlForModel(this.config.baseURL, this.modelId);\n\n    for (let i = 0; i < maxPollAttempts; i++) {\n      const { value: pollResponse } = await postJsonToApi({\n        url: pollUrl,\n        headers,\n        body: { id: requestId },\n        failedResponseHandler: createStatusCodeErrorResponseHandler(),\n        successfulResponseHandler: createJsonResponseHandler(\n          asyncPollResponseSchema,\n        ),\n        abortSignal,\n        fetch: this.config.fetch,\n      });\n\n      const status = pollResponse.status;\n\n      if (status === 'Ready') {\n        const imageUrl = pollResponse.result?.sample;\n        if (typeof imageUrl === 'string') {\n          return imageUrl;\n        }\n        throw new Error(\n          'Fireworks poll response is Ready but missing result.sample',\n        );\n      }\n\n      if (status === 'Error' || status === 'Failed') {\n        throw new Error(\n          `Fireworks image generation failed with status: ${status}`,\n        );\n      }\n\n      // Wait before next poll attempt\n      await delay(pollIntervalMillis);\n    }\n\n    throw new Error(\n      `Fireworks image generation timed out after ${pollTimeoutMillis}ms`,\n    );\n  }\n}\n","import { lazySchema, zodSchema } from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\n\n// Schema for async submit response\nexport const asyncSubmitResponseSchema = lazySchema(() =>\n  zodSchema(\n    z.object({\n      request_id: z.string(),\n    }),\n  ),\n);\n\n// Schema for async poll response\nexport const asyncPollResponseSchema = lazySchema(() =>\n  zodSchema(\n    z.object({\n      id: z.string(),\n      status: z.string(),\n      result: z\n        .object({\n          sample: z.string().optional(),\n        })\n        .nullable(),\n    }),\n  ),\n);\n","import {\n  OpenAICompatibleChatLanguageModel,\n  OpenAICompatibleCompletionLanguageModel,\n  OpenAICompatibleEmbeddingModel,\n  type ProviderErrorStructure,\n} from '@ai-sdk/openai-compatible';\nimport type {\n  EmbeddingModelV4,\n  ImageModelV4,\n  LanguageModelV4,\n  ProviderV4,\n} from '@ai-sdk/provider';\nimport {\n  loadApiKey,\n  withoutTrailingSlash,\n  withUserAgentSuffix,\n  type FetchFunction,\n} from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\nimport type { FireworksChatModelId } from './fireworks-chat-options';\nimport type { FireworksCompletionModelId } from './fireworks-completion-options';\nimport type { FireworksEmbeddingModelId } from './fireworks-embedding-options';\nimport { FireworksImageModel } from './fireworks-image-model';\nimport type { FireworksImageModelId } from './fireworks-image-options';\nimport { VERSION } from './version';\n\nexport type FireworksErrorData = z.infer<typeof fireworksErrorSchema>;\n\nconst fireworksErrorSchema = z.object({\n  error: z.string(),\n});\n\nconst fireworksErrorStructure: ProviderErrorStructure<FireworksErrorData> = {\n  errorSchema: fireworksErrorSchema,\n  errorToMessage: data => data.error,\n};\n\nexport interface FireworksProviderSettings {\n  /**\n   * Fireworks API key. Default value is taken from the `FIREWORKS_API_KEY`\n   * environment variable.\n   */\n  apiKey?: string;\n  /**\n   * Base URL for the API calls.\n   */\n  baseURL?: string;\n  /**\n   * Custom headers to include in the requests.\n   */\n  headers?: Record<string, string>;\n  /**\n   * Custom fetch implementation. You can use it as a middleware to intercept requests,\n   * or to provide a custom fetch implementation for e.g. testing.\n   */\n  fetch?: FetchFunction;\n}\n\nexport interface FireworksProvider extends ProviderV4 {\n  /**\n   * Creates a model for text generation.\n   */\n  (modelId: FireworksChatModelId): LanguageModelV4;\n\n  /**\n   * Creates a chat model for text generation.\n   */\n  chatModel(modelId: FireworksChatModelId): LanguageModelV4;\n\n  /**\n   * Creates a completion model for text generation.\n   */\n  completionModel(modelId: FireworksCompletionModelId): LanguageModelV4;\n\n  /**\n   * Creates a chat model for text generation.\n   */\n  languageModel(modelId: FireworksChatModelId): LanguageModelV4;\n\n  /**\n   * Creates a text embedding model for text generation.\n   */\n  embeddingModel(modelId: FireworksEmbeddingModelId): EmbeddingModelV4;\n\n  /**\n   * @deprecated Use `embeddingModel` instead.\n   */\n  textEmbeddingModel(modelId: FireworksEmbeddingModelId): EmbeddingModelV4;\n\n  /**\n   * Creates a model for image generation.\n   */\n  image(modelId: FireworksImageModelId): ImageModelV4;\n\n  /**\n   * Creates a model for image generation.\n   */\n  imageModel(modelId: FireworksImageModelId): ImageModelV4;\n}\n\nconst defaultBaseURL = 'https://api.fireworks.ai/inference/v1';\n\nexport function createFireworks(\n  options: FireworksProviderSettings = {},\n): FireworksProvider {\n  const baseURL = withoutTrailingSlash(options.baseURL ?? defaultBaseURL);\n  const getHeaders = () =>\n    withUserAgentSuffix(\n      {\n        Authorization: `Bearer ${loadApiKey({\n          apiKey: options.apiKey,\n          environmentVariableName: 'FIREWORKS_API_KEY',\n          description: 'Fireworks API key',\n        })}`,\n        ...options.headers,\n      },\n      `ai-sdk/fireworks/${VERSION}`,\n    );\n\n  interface CommonModelConfig {\n    provider: string;\n    url: ({ path }: { path: string }) => string;\n    headers: () => Record<string, string>;\n    fetch?: FetchFunction;\n  }\n\n  const getCommonModelConfig = (modelType: string): CommonModelConfig => ({\n    provider: `fireworks.${modelType}`,\n    url: ({ path }) => `${baseURL}${path}`,\n    headers: getHeaders,\n    fetch: options.fetch,\n  });\n\n  const createChatModel = (modelId: FireworksChatModelId) => {\n    return new OpenAICompatibleChatLanguageModel(modelId, {\n      ...getCommonModelConfig('chat'),\n      errorStructure: fireworksErrorStructure,\n      transformRequestBody: args => {\n        const thinking = args.thinking as\n          | { type?: string; budgetTokens?: number }\n          | undefined;\n        const reasoningHistory = args.reasoningHistory as string | undefined;\n\n        const {\n          thinking: _,\n          reasoningHistory: __,\n          reasoning_effort,\n          ...rest\n        } = args;\n\n        return {\n          ...rest,\n          ...(reasoning_effort != null && {\n            // Workaround since OpenAI spec allows for 5 reasoning levels, but Fireworks only supports 3 of them.\n            reasoning_effort:\n              reasoning_effort === 'minimal'\n                ? 'low'\n                : reasoning_effort === 'xhigh'\n                  ? 'high'\n                  : reasoning_effort,\n          }),\n          ...(thinking && {\n            thinking: {\n              type: thinking.type,\n              ...(thinking.budgetTokens !== undefined && {\n                budget_tokens: thinking.budgetTokens,\n              }),\n            },\n          }),\n          ...(reasoningHistory && {\n            reasoning_history: reasoningHistory,\n          }),\n        };\n      },\n    });\n  };\n\n  const createCompletionModel = (modelId: FireworksCompletionModelId) =>\n    new OpenAICompatibleCompletionLanguageModel(modelId, {\n      ...getCommonModelConfig('completion'),\n      errorStructure: fireworksErrorStructure,\n    });\n\n  const createEmbeddingModel = (modelId: FireworksEmbeddingModelId) =>\n    new OpenAICompatibleEmbeddingModel(modelId, {\n      ...getCommonModelConfig('embedding'),\n      errorStructure: fireworksErrorStructure,\n    });\n\n  const createImageModel = (modelId: FireworksImageModelId) =>\n    new FireworksImageModel(modelId, {\n      ...getCommonModelConfig('image'),\n      baseURL: baseURL ?? defaultBaseURL,\n    });\n\n  const provider = (modelId: FireworksChatModelId) => createChatModel(modelId);\n\n  provider.specificationVersion = 'v4' as const;\n  provider.completionModel = createCompletionModel;\n  provider.chatModel = createChatModel;\n  provider.languageModel = createChatModel;\n  provider.embeddingModel = createEmbeddingModel;\n  provider.textEmbeddingModel = createEmbeddingModel;\n  provider.image = createImageModel;\n  provider.imageModel = createImageModel;\n  return provider;\n}\n\nexport const fireworks = createFireworks();\n","// Version string of this package injected at build time.\ndeclare const __PACKAGE_VERSION__: string | undefined;\nexport const VERSION: string =\n  typeof __PACKAGE_VERSION__ !== 'undefined'\n    ? __PACKAGE_VERSION__\n    : '0.0.0-test';\n"],"mappings":";AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACdP,SAAS,YAAY,iBAAiB;AACtC,SAAS,SAAS;AAGX,IAAM,4BAA4B;AAAA,EAAW,MAClD;AAAA,IACE,EAAE,OAAO;AAAA,MACP,YAAY,EAAE,OAAO;AAAA,IACvB,CAAC;AAAA,EACH;AACF;AAGO,IAAM,0BAA0B;AAAA,EAAW,MAChD;AAAA,IACE,EAAE,OAAO;AAAA,MACP,IAAI,EAAE,OAAO;AAAA,MACb,QAAQ,EAAE,OAAO;AAAA,MACjB,QAAQ,EACL,OAAO;AAAA,QACN,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,MAC9B,CAAC,EACA,SAAS;AAAA,IACd,CAAC;AAAA,EACH;AACF;;;ADJA,IAAM,+BAA+B;AACrC,IAAM,8BAA8B;AAQpC,IAAM,uBAEF;AAAA,EACF,4CAA4C;AAAA,IAC1C,WAAW;AAAA,EACb;AAAA,EACA,gDAAgD;AAAA,IAC9C,WAAW;AAAA,EACb;AAAA,EACA,8CAA8C;AAAA,IAC5C,WAAW;AAAA,IACX,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAA8C;AAAA,IAC5C,WAAW;AAAA,IACX,iBAAiB;AAAA,EACnB;AAAA,EACA,8DAA8D;AAAA,IAC5D,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAAA,EACA,0DAA0D;AAAA,IACxD,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAAA,EACA,4DAA4D;AAAA,IAC1D,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAAA,EACA,2DAA2D;AAAA,IACzD,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAAA,EACA,oCAAoC;AAAA,IAClC,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AACF;AAEA,SAAS,eACP,SACA,SACQ;AACR,QAAM,SAAS,qBAAqB,OAAO;AAE3C,UAAQ,iCAAQ,WAAW;AAAA,IACzB,KAAK;AACH,aAAO,GAAG,OAAO,qBAAqB,OAAO;AAAA,IAC/C,KAAK;AACH,aAAO,GAAG,OAAO,cAAc,OAAO;AAAA,IACxC,KAAK;AAAA,IACL;AACE,aAAO,GAAG,OAAO,cAAc,OAAO;AAAA,EAC1C;AACF;AAEA,SAAS,mBACP,SACA,SACQ;AACR,SAAO,GAAG,OAAO,cAAc,OAAO;AACxC;AAsBO,IAAM,sBAAN,MAAM,qBAA4C;AAAA,EAsBvD,YACW,SACD,QACR;AAFS;AACD;AAvBV,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAAA,EAuBzB;AAAA,EArBH,IAAI,WAAmB;AACrB,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,QAAQ,kBAAkB,EAAE,OAA4B;AACtD,WAAO,sBAAsB;AAAA,MAC3B,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,QAAQ,oBAAoB,EAAE,SAG3B;AACD,WAAO,IAAI,qBAAoB,QAAQ,SAAS,QAAQ,MAAM;AAAA,EAChE;AAAA,EAOA,MAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAEE;AAzJJ;AA0JI,UAAM,WAAmC,CAAC;AAE1C,UAAM,gBAAgB,qBAAqB,KAAK,OAAO;AACvD,QAAI,EAAC,+CAAe,iBAAgB,QAAQ,MAAM;AAChD,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAIA,SAAI,+CAAe,iBAAgB,eAAe,MAAM;AACtD,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAGA,UAAM,gBAAgB,SAAS,QAAQ,MAAM,SAAS;AACtD,QAAI;AAEJ,QAAI,eAAe;AACjB,mBAAa,+BAA+B,MAAM,CAAC,CAAC;AAEpD,UAAI,MAAM,SAAS,GAAG;AACpB,iBAAS,KAAK;AAAA,UACZ,MAAM;AAAA,UACN,SACE;AAAA,QACJ,CAAC;AAAA,MACH;AAAA,IACF;AAGA,QAAI,QAAQ,MAAM;AAChB,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAEA,UAAM,YAAY,6BAAM,MAAM;AAC9B,UAAM,eAAc,sBAAK,OAAO,cAAZ,mBAAuB,gBAAvB,4CAA0C,oBAAI,KAAK;AACvE,UAAM,kBAAkB,gBAAe,gBAAK,QAAO,YAAZ,6BAAyB,OAAO;AAEvE,UAAM,OAAO;AAAA,MACX;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,SAAS;AAAA,MACT,GAAI,cAAc,EAAE,aAAa,WAAW;AAAA,MAC5C,GAAI,aAAa,EAAE,OAAO,UAAU,CAAC,GAAG,QAAQ,UAAU,CAAC,EAAE;AAAA,MAC7D,IAAI,qBAAgB,cAAhB,YAA6B,CAAC;AAAA,IACpC;AAGA,SAAI,+CAAe,eAAc,mBAAmB;AAClD,aAAO,KAAK,gBAAgB;AAAA,QAC1B;AAAA,QACA,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAGA,UAAM,EAAE,OAAO,UAAU,gBAAgB,IAAI,MAAM,cAAc;AAAA,MAC/D,KAAK,eAAe,KAAK,OAAO,SAAS,KAAK,OAAO;AAAA,MACrD,SAAS;AAAA,MACT;AAAA,MACA,uBAAuB,qCAAqC;AAAA,MAC5D,2BAA2B,4BAA4B;AAAA,MACvD;AAAA,MACA,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,WAAO;AAAA,MACL,QAAQ,CAAC,QAAQ;AAAA,MACjB;AAAA,MACA,UAAU;AAAA,QACR,WAAW;AAAA,QACX,SAAS,KAAK;AAAA,QACd,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,gBAAgB;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAM6D;AAE3D,UAAM,EAAE,OAAO,eAAe,IAAI,MAAM,cAAc;AAAA,MACpD,KAAK,eAAe,KAAK,OAAO,SAAS,KAAK,OAAO;AAAA,MACrD;AAAA,MACA;AAAA,MACA,uBAAuB,qCAAqC;AAAA,MAC5D,2BAA2B;AAAA,QACzB;AAAA,MACF;AAAA,MACA;AAAA,MACA,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,UAAM,YAAY,eAAe;AAGjC,UAAM,WAAW,MAAM,KAAK,gBAAgB;AAAA,MAC1C;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAGD,UAAM,EAAE,OAAO,YAAY,gBAAgB,IAAI,MAAM,WAAW;AAAA,MAC9D,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,uBAAuB,qCAAqC;AAAA,MAC5D,2BAA2B,4BAA4B;AAAA,MACvD,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,WAAO;AAAA,MACL,QAAQ,CAAC,UAAU;AAAA,MACnB;AAAA,MACA,UAAU;AAAA,QACR,WAAW;AAAA,QACX,SAAS,KAAK;AAAA,QACd,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,gBAAgB;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIoB;AAhUtB;AAiUI,UAAM,sBACJ,UAAK,OAAO,uBAAZ,YAAkC;AACpC,UAAM,qBACJ,UAAK,OAAO,sBAAZ,YAAiC;AACnC,UAAM,kBAAkB,KAAK;AAAA,MAC3B,oBAAoB,KAAK,IAAI,GAAG,kBAAkB;AAAA,IACpD;AAEA,UAAM,UAAU,mBAAmB,KAAK,OAAO,SAAS,KAAK,OAAO;AAEpE,aAAS,IAAI,GAAG,IAAI,iBAAiB,KAAK;AACxC,YAAM,EAAE,OAAO,aAAa,IAAI,MAAM,cAAc;AAAA,QAClD,KAAK;AAAA,QACL;AAAA,QACA,MAAM,EAAE,IAAI,UAAU;AAAA,QACtB,uBAAuB,qCAAqC;AAAA,QAC5D,2BAA2B;AAAA,UACzB;AAAA,QACF;AAAA,QACA;AAAA,QACA,OAAO,KAAK,OAAO;AAAA,MACrB,CAAC;AAED,YAAM,SAAS,aAAa;AAE5B,UAAI,WAAW,SAAS;AACtB,cAAM,YAAW,kBAAa,WAAb,mBAAqB;AACtC,YAAI,OAAO,aAAa,UAAU;AAChC,iBAAO;AAAA,QACT;AACA,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,UAAI,WAAW,WAAW,WAAW,UAAU;AAC7C,cAAM,IAAI;AAAA,UACR,kDAAkD,MAAM;AAAA,QAC1D;AAAA,MACF;AAGA,YAAM,MAAM,kBAAkB;AAAA,IAChC;AAEA,UAAM,IAAI;AAAA,MACR,8CAA8C,iBAAiB;AAAA,IACjE;AAAA,EACF;AACF;;;AElXA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,KAAAA,UAAS;;;AChBX,IAAM,UACX,OACI,oBACA;;;ADuBN,IAAM,uBAAuBC,GAAE,OAAO;AAAA,EACpC,OAAOA,GAAE,OAAO;AAClB,CAAC;AAED,IAAM,0BAAsE;AAAA,EAC1E,aAAa;AAAA,EACb,gBAAgB,UAAQ,KAAK;AAC/B;AAiEA,IAAM,iBAAiB;AAEhB,SAAS,gBACd,UAAqC,CAAC,GACnB;AAxGrB;AAyGE,QAAM,UAAU,sBAAqB,aAAQ,YAAR,YAAmB,cAAc;AACtE,QAAM,aAAa,MACjB;AAAA,IACE;AAAA,MACE,eAAe,UAAU,WAAW;AAAA,QAClC,QAAQ,QAAQ;AAAA,QAChB,yBAAyB;AAAA,QACzB,aAAa;AAAA,MACf,CAAC,CAAC;AAAA,MACF,GAAG,QAAQ;AAAA,IACb;AAAA,IACA,oBAAoB,OAAO;AAAA,EAC7B;AASF,QAAM,uBAAuB,CAAC,eAA0C;AAAA,IACtE,UAAU,aAAa,SAAS;AAAA,IAChC,KAAK,CAAC,EAAE,KAAK,MAAM,GAAG,OAAO,GAAG,IAAI;AAAA,IACpC,SAAS;AAAA,IACT,OAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,kBAAkB,CAAC,YAAkC;AACzD,WAAO,IAAI,kCAAkC,SAAS;AAAA,MACpD,GAAG,qBAAqB,MAAM;AAAA,MAC9B,gBAAgB;AAAA,MAChB,sBAAsB,UAAQ;AAC5B,cAAM,WAAW,KAAK;AAGtB,cAAM,mBAAmB,KAAK;AAE9B,cAAM;AAAA,UACJ,UAAU;AAAA,UACV,kBAAkB;AAAA,UAClB;AAAA,UACA,GAAG;AAAA,QACL,IAAI;AAEJ,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,oBAAoB,QAAQ;AAAA;AAAA,YAE9B,kBACE,qBAAqB,YACjB,QACA,qBAAqB,UACnB,SACA;AAAA,UACV;AAAA,UACA,GAAI,YAAY;AAAA,YACd,UAAU;AAAA,cACR,MAAM,SAAS;AAAA,cACf,GAAI,SAAS,iBAAiB,UAAa;AAAA,gBACzC,eAAe,SAAS;AAAA,cAC1B;AAAA,YACF;AAAA,UACF;AAAA,UACA,GAAI,oBAAoB;AAAA,YACtB,mBAAmB;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,wBAAwB,CAAC,YAC7B,IAAI,wCAAwC,SAAS;AAAA,IACnD,GAAG,qBAAqB,YAAY;AAAA,IACpC,gBAAgB;AAAA,EAClB,CAAC;AAEH,QAAM,uBAAuB,CAAC,YAC5B,IAAI,+BAA+B,SAAS;AAAA,IAC1C,GAAG,qBAAqB,WAAW;AAAA,IACnC,gBAAgB;AAAA,EAClB,CAAC;AAEH,QAAM,mBAAmB,CAAC,YACxB,IAAI,oBAAoB,SAAS;AAAA,IAC/B,GAAG,qBAAqB,OAAO;AAAA,IAC/B,SAAS,4BAAW;AAAA,EACtB,CAAC;AAEH,QAAM,WAAW,CAAC,YAAkC,gBAAgB,OAAO;AAE3E,WAAS,uBAAuB;AAChC,WAAS,kBAAkB;AAC3B,WAAS,YAAY;AACrB,WAAS,gBAAgB;AACzB,WAAS,iBAAiB;AAC1B,WAAS,qBAAqB;AAC9B,WAAS,QAAQ;AACjB,WAAS,aAAa;AACtB,SAAO;AACT;AAEO,IAAM,YAAY,gBAAgB;","names":["z","z"]}
+{"version":3,"sources":["../src/fireworks-image-model.ts","../src/fireworks-image-api.ts","../src/fireworks-provider.ts","../src/version.ts"],"sourcesContent":["import type { ImageModelV4, SharedV4Warning } from '@ai-sdk/provider';\nimport {\n  combineHeaders,\n  convertImageModelFileToDataUri,\n  createBinaryResponseHandler,\n  createJsonResponseHandler,\n  createStatusCodeErrorResponseHandler,\n  delay,\n  getFromApi,\n  isSameOrigin,\n  postJsonToApi,\n  serializeModelOptions,\n  WORKFLOW_SERIALIZE,\n  WORKFLOW_DESERIALIZE,\n  type FetchFunction,\n} from '@ai-sdk/provider-utils';\nimport {\n  asyncPollResponseSchema,\n  asyncSubmitResponseSchema,\n} from './fireworks-image-api';\nimport type { FireworksImageModelId } from './fireworks-image-options';\n\nconst DEFAULT_POLL_INTERVAL_MILLIS = 500;\nconst DEFAULT_POLL_TIMEOUT_MILLIS = 120000; // 2 minutes for image generation\n\ninterface FireworksImageModelBackendConfig {\n  urlFormat: 'workflows' | 'workflows_async' | 'image_generation';\n  supportsSize?: boolean;\n  supportsEditing?: boolean;\n}\n\nconst modelToBackendConfig: Partial<\n  Record<FireworksImageModelId, FireworksImageModelBackendConfig>\n> = {\n  'accounts/fireworks/models/flux-1-dev-fp8': {\n    urlFormat: 'workflows',\n  },\n  'accounts/fireworks/models/flux-1-schnell-fp8': {\n    urlFormat: 'workflows',\n  },\n  'accounts/fireworks/models/flux-kontext-pro': {\n    urlFormat: 'workflows_async',\n    supportsEditing: true,\n  },\n  'accounts/fireworks/models/flux-kontext-max': {\n    urlFormat: 'workflows_async',\n    supportsEditing: true,\n  },\n  'accounts/fireworks/models/playground-v2-5-1024px-aesthetic': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n  'accounts/fireworks/models/japanese-stable-diffusion-xl': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n  'accounts/fireworks/models/playground-v2-1024px-aesthetic': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n  'accounts/fireworks/models/stable-diffusion-xl-1024-v1-0': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n  'accounts/fireworks/models/SSD-1B': {\n    urlFormat: 'image_generation',\n    supportsSize: true,\n  },\n};\n\nfunction getUrlForModel(\n  baseUrl: string,\n  modelId: FireworksImageModelId,\n): string {\n  const config = modelToBackendConfig[modelId];\n\n  switch (config?.urlFormat) {\n    case 'image_generation':\n      return `${baseUrl}/image_generation/${modelId}`;\n    case 'workflows_async':\n      return `${baseUrl}/workflows/${modelId}`;\n    case 'workflows':\n    default:\n      return `${baseUrl}/workflows/${modelId}/text_to_image`;\n  }\n}\n\nfunction getPollUrlForModel(\n  baseUrl: string,\n  modelId: FireworksImageModelId,\n): string {\n  return `${baseUrl}/workflows/${modelId}/get_result`;\n}\n\ninterface FireworksImageModelConfig {\n  provider: string;\n  baseURL: string;\n  headers?: () => Record<string, string>;\n  fetch?: FetchFunction;\n  /**\n   * Poll interval in milliseconds between status checks for async models.\n   * Defaults to 500ms.\n   */\n  pollIntervalMillis?: number;\n  /**\n   * Overall timeout in milliseconds for polling before giving up.\n   * Defaults to 120000ms (2 minutes).\n   */\n  pollTimeoutMillis?: number;\n  _internal?: {\n    currentDate?: () => Date;\n  };\n}\n\nexport class FireworksImageModel implements ImageModelV4 {\n  readonly specificationVersion = 'v4';\n  readonly maxImagesPerCall = 1;\n\n  get provider(): string {\n    return this.config.provider;\n  }\n\n  static [WORKFLOW_SERIALIZE](model: FireworksImageModel) {\n    return serializeModelOptions({\n      modelId: model.modelId,\n      config: model.config,\n    });\n  }\n\n  static [WORKFLOW_DESERIALIZE](options: {\n    modelId: FireworksImageModelId;\n    config: FireworksImageModelConfig;\n  }) {\n    return new FireworksImageModel(options.modelId, options.config);\n  }\n\n  constructor(\n    readonly modelId: FireworksImageModelId,\n    private config: FireworksImageModelConfig,\n  ) {}\n\n  async doGenerate({\n    prompt,\n    n,\n    size,\n    aspectRatio,\n    seed,\n    providerOptions,\n    headers,\n    abortSignal,\n    files,\n    mask,\n  }: Parameters<ImageModelV4['doGenerate']>[0]): Promise<\n    Awaited<ReturnType<ImageModelV4['doGenerate']>>\n  > {\n    const warnings: Array<SharedV4Warning> = [];\n\n    const backendConfig = modelToBackendConfig[this.modelId];\n    if (!backendConfig?.supportsSize && size != null) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'size',\n        details:\n          'This model does not support the `size` option. Use `aspectRatio` instead.',\n      });\n    }\n\n    // Use supportsSize as a proxy for whether the model does not support\n    // aspectRatio. This invariant holds for the current set of models.\n    if (backendConfig?.supportsSize && aspectRatio != null) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'aspectRatio',\n        details: 'This model does not support the `aspectRatio` option.',\n      });\n    }\n\n    // Handle files for image editing\n    const hasInputImage = files != null && files.length > 0;\n    let inputImage: string | undefined;\n\n    if (hasInputImage) {\n      inputImage = convertImageModelFileToDataUri(files[0]);\n\n      if (files.length > 1) {\n        warnings.push({\n          type: 'other',\n          message:\n            'Fireworks only supports a single input image. Additional images are ignored.',\n        });\n      }\n    }\n\n    // Warn about mask - Fireworks Kontext models don't support explicit masks\n    if (mask != null) {\n      warnings.push({\n        type: 'unsupported',\n        feature: 'mask',\n        details:\n          'Fireworks Kontext models do not support explicit masks. Use the prompt to describe the areas to edit.',\n      });\n    }\n\n    const splitSize = size?.split('x');\n    const currentDate = this.config._internal?.currentDate?.() ?? new Date();\n    const combinedHeaders = combineHeaders(this.config.headers?.(), headers);\n\n    const body = {\n      prompt,\n      aspect_ratio: aspectRatio,\n      seed,\n      samples: n,\n      ...(inputImage && { input_image: inputImage }),\n      ...(splitSize && { width: splitSize[0], height: splitSize[1] }),\n      ...(providerOptions.fireworks ?? {}),\n    };\n\n    // Handle async models that require polling (e.g., flux-kontext-*)\n    if (backendConfig?.urlFormat === 'workflows_async') {\n      return this.doGenerateAsync({\n        body,\n        headers: combinedHeaders,\n        abortSignal,\n        warnings,\n        currentDate,\n      });\n    }\n\n    // Handle sync models that return binary directly\n    const { value: response, responseHeaders } = await postJsonToApi({\n      url: getUrlForModel(this.config.baseURL, this.modelId),\n      headers: combinedHeaders,\n      body,\n      failedResponseHandler: createStatusCodeErrorResponseHandler(),\n      successfulResponseHandler: createBinaryResponseHandler(),\n      abortSignal,\n      fetch: this.config.fetch,\n    });\n\n    return {\n      images: [response],\n      warnings,\n      response: {\n        timestamp: currentDate,\n        modelId: this.modelId,\n        headers: responseHeaders,\n      },\n    };\n  }\n\n  /**\n   * Handles async image generation for models like flux-kontext-* that return\n   * a request_id and require polling for results.\n   */\n  private async doGenerateAsync({\n    body,\n    headers,\n    abortSignal,\n    warnings,\n    currentDate,\n  }: {\n    body: Record<string, unknown>;\n    headers: Record<string, string | undefined>;\n    abortSignal: AbortSignal | undefined;\n    warnings: Array<SharedV4Warning>;\n    currentDate: Date;\n  }): Promise<Awaited<ReturnType<ImageModelV4['doGenerate']>>> {\n    // Submit the generation request\n    const { value: submitResponse } = await postJsonToApi({\n      url: getUrlForModel(this.config.baseURL, this.modelId),\n      headers,\n      body,\n      failedResponseHandler: createStatusCodeErrorResponseHandler(),\n      successfulResponseHandler: createJsonResponseHandler(\n        asyncSubmitResponseSchema,\n      ),\n      abortSignal,\n      fetch: this.config.fetch,\n    });\n\n    const requestId = submitResponse.request_id;\n\n    // Poll for the result\n    const imageUrl = await this.pollForImageUrl({\n      requestId,\n      headers,\n      abortSignal,\n    });\n\n    // Download the image from the URL. The URL comes from the provider\n    // response and typically points at a CDN, so only send credentials when it\n    // stays on the provider's own origin (never leak the API key to a CDN or an\n    // attacker-named host).\n    const { value: imageBytes, responseHeaders } = await getFromApi({\n      url: imageUrl,\n      headers: isSameOrigin(imageUrl, this.config.baseURL)\n        ? headers\n        : undefined,\n      abortSignal,\n      failedResponseHandler: createStatusCodeErrorResponseHandler(),\n      successfulResponseHandler: createBinaryResponseHandler(),\n      fetch: this.config.fetch,\n    });\n\n    return {\n      images: [imageBytes],\n      warnings,\n      response: {\n        timestamp: currentDate,\n        modelId: this.modelId,\n        headers: responseHeaders,\n      },\n    };\n  }\n\n  /**\n   * Polls the get_result endpoint until the image is ready.\n   */\n  private async pollForImageUrl({\n    requestId,\n    headers,\n    abortSignal,\n  }: {\n    requestId: string;\n    headers: Record<string, string | undefined>;\n    abortSignal: AbortSignal | undefined;\n  }): Promise<string> {\n    const pollIntervalMillis =\n      this.config.pollIntervalMillis ?? DEFAULT_POLL_INTERVAL_MILLIS;\n    const pollTimeoutMillis =\n      this.config.pollTimeoutMillis ?? DEFAULT_POLL_TIMEOUT_MILLIS;\n    const maxPollAttempts = Math.ceil(\n      pollTimeoutMillis / Math.max(1, pollIntervalMillis),\n    );\n\n    const pollUrl = getPollUrlForModel(this.config.baseURL, this.modelId);\n\n    for (let i = 0; i < maxPollAttempts; i++) {\n      const { value: pollResponse } = await postJsonToApi({\n        url: pollUrl,\n        headers,\n        body: { id: requestId },\n        failedResponseHandler: createStatusCodeErrorResponseHandler(),\n        successfulResponseHandler: createJsonResponseHandler(\n          asyncPollResponseSchema,\n        ),\n        abortSignal,\n        fetch: this.config.fetch,\n      });\n\n      const status = pollResponse.status;\n\n      if (status === 'Ready') {\n        const imageUrl = pollResponse.result?.sample;\n        if (typeof imageUrl === 'string') {\n          return imageUrl;\n        }\n        throw new Error(\n          'Fireworks poll response is Ready but missing result.sample',\n        );\n      }\n\n      if (status === 'Error' || status === 'Failed') {\n        throw new Error(\n          `Fireworks image generation failed with status: ${status}`,\n        );\n      }\n\n      // Wait before next poll attempt\n      await delay(pollIntervalMillis);\n    }\n\n    throw new Error(\n      `Fireworks image generation timed out after ${pollTimeoutMillis}ms`,\n    );\n  }\n}\n","import { lazySchema, zodSchema } from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\n\n// Schema for async submit response\nexport const asyncSubmitResponseSchema = lazySchema(() =>\n  zodSchema(\n    z.object({\n      request_id: z.string(),\n    }),\n  ),\n);\n\n// Schema for async poll response\nexport const asyncPollResponseSchema = lazySchema(() =>\n  zodSchema(\n    z.object({\n      id: z.string(),\n      status: z.string(),\n      result: z\n        .object({\n          sample: z.string().optional(),\n        })\n        .nullable(),\n    }),\n  ),\n);\n","import {\n  OpenAICompatibleChatLanguageModel,\n  OpenAICompatibleCompletionLanguageModel,\n  OpenAICompatibleEmbeddingModel,\n  type ProviderErrorStructure,\n} from '@ai-sdk/openai-compatible';\nimport type {\n  EmbeddingModelV4,\n  ImageModelV4,\n  LanguageModelV4,\n  ProviderV4,\n} from '@ai-sdk/provider';\nimport {\n  loadApiKey,\n  withoutTrailingSlash,\n  withUserAgentSuffix,\n  type FetchFunction,\n} from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\nimport type { FireworksChatModelId } from './fireworks-chat-options';\nimport type { FireworksCompletionModelId } from './fireworks-completion-options';\nimport type { FireworksEmbeddingModelId } from './fireworks-embedding-options';\nimport { FireworksImageModel } from './fireworks-image-model';\nimport type { FireworksImageModelId } from './fireworks-image-options';\nimport { VERSION } from './version';\n\nexport type FireworksErrorData = z.infer<typeof fireworksErrorSchema>;\n\nconst fireworksErrorSchema = z.object({\n  error: z.string(),\n});\n\nconst fireworksErrorStructure: ProviderErrorStructure<FireworksErrorData> = {\n  errorSchema: fireworksErrorSchema,\n  errorToMessage: data => data.error,\n};\n\nexport interface FireworksProviderSettings {\n  /**\n   * Fireworks API key. Default value is taken from the `FIREWORKS_API_KEY`\n   * environment variable.\n   */\n  apiKey?: string;\n  /**\n   * Base URL for the API calls.\n   */\n  baseURL?: string;\n  /**\n   * Custom headers to include in the requests.\n   */\n  headers?: Record<string, string>;\n  /**\n   * Custom fetch implementation. You can use it as a middleware to intercept requests,\n   * or to provide a custom fetch implementation for e.g. testing.\n   */\n  fetch?: FetchFunction;\n}\n\nexport interface FireworksProvider extends ProviderV4 {\n  /**\n   * Creates a model for text generation.\n   */\n  (modelId: FireworksChatModelId): LanguageModelV4;\n\n  /**\n   * Creates a chat model for text generation.\n   */\n  chatModel(modelId: FireworksChatModelId): LanguageModelV4;\n\n  /**\n   * Creates a completion model for text generation.\n   */\n  completionModel(modelId: FireworksCompletionModelId): LanguageModelV4;\n\n  /**\n   * Creates a chat model for text generation.\n   */\n  languageModel(modelId: FireworksChatModelId): LanguageModelV4;\n\n  /**\n   * Creates a text embedding model for text generation.\n   */\n  embeddingModel(modelId: FireworksEmbeddingModelId): EmbeddingModelV4;\n\n  /**\n   * @deprecated Use `embeddingModel` instead.\n   */\n  textEmbeddingModel(modelId: FireworksEmbeddingModelId): EmbeddingModelV4;\n\n  /**\n   * Creates a model for image generation.\n   */\n  image(modelId: FireworksImageModelId): ImageModelV4;\n\n  /**\n   * Creates a model for image generation.\n   */\n  imageModel(modelId: FireworksImageModelId): ImageModelV4;\n}\n\nconst defaultBaseURL = 'https://api.fireworks.ai/inference/v1';\n\nexport function createFireworks(\n  options: FireworksProviderSettings = {},\n): FireworksProvider {\n  const baseURL = withoutTrailingSlash(options.baseURL ?? defaultBaseURL);\n  const getHeaders = () =>\n    withUserAgentSuffix(\n      {\n        Authorization: `Bearer ${loadApiKey({\n          apiKey: options.apiKey,\n          environmentVariableName: 'FIREWORKS_API_KEY',\n          description: 'Fireworks API key',\n        })}`,\n        ...options.headers,\n      },\n      `ai-sdk/fireworks/${VERSION}`,\n    );\n\n  interface CommonModelConfig {\n    provider: string;\n    url: ({ path }: { path: string }) => string;\n    headers: () => Record<string, string>;\n    fetch?: FetchFunction;\n  }\n\n  const getCommonModelConfig = (modelType: string): CommonModelConfig => ({\n    provider: `fireworks.${modelType}`,\n    url: ({ path }) => `${baseURL}${path}`,\n    headers: getHeaders,\n    fetch: options.fetch,\n  });\n\n  const createChatModel = (modelId: FireworksChatModelId) => {\n    return new OpenAICompatibleChatLanguageModel(modelId, {\n      ...getCommonModelConfig('chat'),\n      errorStructure: fireworksErrorStructure,\n      transformRequestBody: args => {\n        const thinking = args.thinking as\n          | { type?: string; budgetTokens?: number }\n          | undefined;\n        const reasoningHistory = args.reasoningHistory as string | undefined;\n\n        const {\n          thinking: _,\n          reasoningHistory: __,\n          reasoning_effort,\n          ...rest\n        } = args;\n\n        return {\n          ...rest,\n          ...(reasoning_effort != null && {\n            // Workaround since OpenAI spec allows for 5 reasoning levels, but Fireworks only supports 3 of them.\n            reasoning_effort:\n              reasoning_effort === 'minimal'\n                ? 'low'\n                : reasoning_effort === 'xhigh'\n                  ? 'high'\n                  : reasoning_effort,\n          }),\n          ...(thinking && {\n            thinking: {\n              type: thinking.type,\n              ...(thinking.budgetTokens !== undefined && {\n                budget_tokens: thinking.budgetTokens,\n              }),\n            },\n          }),\n          ...(reasoningHistory && {\n            reasoning_history: reasoningHistory,\n          }),\n        };\n      },\n    });\n  };\n\n  const createCompletionModel = (modelId: FireworksCompletionModelId) =>\n    new OpenAICompatibleCompletionLanguageModel(modelId, {\n      ...getCommonModelConfig('completion'),\n      errorStructure: fireworksErrorStructure,\n    });\n\n  const createEmbeddingModel = (modelId: FireworksEmbeddingModelId) =>\n    new OpenAICompatibleEmbeddingModel(modelId, {\n      ...getCommonModelConfig('embedding'),\n      errorStructure: fireworksErrorStructure,\n    });\n\n  const createImageModel = (modelId: FireworksImageModelId) =>\n    new FireworksImageModel(modelId, {\n      ...getCommonModelConfig('image'),\n      baseURL: baseURL ?? defaultBaseURL,\n    });\n\n  const provider = (modelId: FireworksChatModelId) => createChatModel(modelId);\n\n  provider.specificationVersion = 'v4' as const;\n  provider.completionModel = createCompletionModel;\n  provider.chatModel = createChatModel;\n  provider.languageModel = createChatModel;\n  provider.embeddingModel = createEmbeddingModel;\n  provider.textEmbeddingModel = createEmbeddingModel;\n  provider.image = createImageModel;\n  provider.imageModel = createImageModel;\n  return provider;\n}\n\nexport const fireworks = createFireworks();\n","// Version string of this package injected at build time.\ndeclare const __PACKAGE_VERSION__: string | undefined;\nexport const VERSION: string =\n  typeof __PACKAGE_VERSION__ !== 'undefined'\n    ? __PACKAGE_VERSION__\n    : '0.0.0-test';\n"],"mappings":";AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACfP,SAAS,YAAY,iBAAiB;AACtC,SAAS,SAAS;AAGX,IAAM,4BAA4B;AAAA,EAAW,MAClD;AAAA,IACE,EAAE,OAAO;AAAA,MACP,YAAY,EAAE,OAAO;AAAA,IACvB,CAAC;AAAA,EACH;AACF;AAGO,IAAM,0BAA0B;AAAA,EAAW,MAChD;AAAA,IACE,EAAE,OAAO;AAAA,MACP,IAAI,EAAE,OAAO;AAAA,MACb,QAAQ,EAAE,OAAO;AAAA,MACjB,QAAQ,EACL,OAAO;AAAA,QACN,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,MAC9B,CAAC,EACA,SAAS;AAAA,IACd,CAAC;AAAA,EACH;AACF;;;ADHA,IAAM,+BAA+B;AACrC,IAAM,8BAA8B;AAQpC,IAAM,uBAEF;AAAA,EACF,4CAA4C;AAAA,IAC1C,WAAW;AAAA,EACb;AAAA,EACA,gDAAgD;AAAA,IAC9C,WAAW;AAAA,EACb;AAAA,EACA,8CAA8C;AAAA,IAC5C,WAAW;AAAA,IACX,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAA8C;AAAA,IAC5C,WAAW;AAAA,IACX,iBAAiB;AAAA,EACnB;AAAA,EACA,8DAA8D;AAAA,IAC5D,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAAA,EACA,0DAA0D;AAAA,IACxD,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAAA,EACA,4DAA4D;AAAA,IAC1D,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAAA,EACA,2DAA2D;AAAA,IACzD,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAAA,EACA,oCAAoC;AAAA,IAClC,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AACF;AAEA,SAAS,eACP,SACA,SACQ;AACR,QAAM,SAAS,qBAAqB,OAAO;AAE3C,UAAQ,iCAAQ,WAAW;AAAA,IACzB,KAAK;AACH,aAAO,GAAG,OAAO,qBAAqB,OAAO;AAAA,IAC/C,KAAK;AACH,aAAO,GAAG,OAAO,cAAc,OAAO;AAAA,IACxC,KAAK;AAAA,IACL;AACE,aAAO,GAAG,OAAO,cAAc,OAAO;AAAA,EAC1C;AACF;AAEA,SAAS,mBACP,SACA,SACQ;AACR,SAAO,GAAG,OAAO,cAAc,OAAO;AACxC;AAsBO,IAAM,sBAAN,MAAM,qBAA4C;AAAA,EAsBvD,YACW,SACD,QACR;AAFS;AACD;AAvBV,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAAA,EAuBzB;AAAA,EArBH,IAAI,WAAmB;AACrB,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,QAAQ,kBAAkB,EAAE,OAA4B;AACtD,WAAO,sBAAsB;AAAA,MAC3B,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,QAAQ,oBAAoB,EAAE,SAG3B;AACD,WAAO,IAAI,qBAAoB,QAAQ,SAAS,QAAQ,MAAM;AAAA,EAChE;AAAA,EAOA,MAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAEE;AA1JJ;AA2JI,UAAM,WAAmC,CAAC;AAE1C,UAAM,gBAAgB,qBAAqB,KAAK,OAAO;AACvD,QAAI,EAAC,+CAAe,iBAAgB,QAAQ,MAAM;AAChD,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAIA,SAAI,+CAAe,iBAAgB,eAAe,MAAM;AACtD,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAGA,UAAM,gBAAgB,SAAS,QAAQ,MAAM,SAAS;AACtD,QAAI;AAEJ,QAAI,eAAe;AACjB,mBAAa,+BAA+B,MAAM,CAAC,CAAC;AAEpD,UAAI,MAAM,SAAS,GAAG;AACpB,iBAAS,KAAK;AAAA,UACZ,MAAM;AAAA,UACN,SACE;AAAA,QACJ,CAAC;AAAA,MACH;AAAA,IACF;AAGA,QAAI,QAAQ,MAAM;AAChB,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAEA,UAAM,YAAY,6BAAM,MAAM;AAC9B,UAAM,eAAc,sBAAK,OAAO,cAAZ,mBAAuB,gBAAvB,4CAA0C,oBAAI,KAAK;AACvE,UAAM,kBAAkB,gBAAe,gBAAK,QAAO,YAAZ,6BAAyB,OAAO;AAEvE,UAAM,OAAO;AAAA,MACX;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,SAAS;AAAA,MACT,GAAI,cAAc,EAAE,aAAa,WAAW;AAAA,MAC5C,GAAI,aAAa,EAAE,OAAO,UAAU,CAAC,GAAG,QAAQ,UAAU,CAAC,EAAE;AAAA,MAC7D,IAAI,qBAAgB,cAAhB,YAA6B,CAAC;AAAA,IACpC;AAGA,SAAI,+CAAe,eAAc,mBAAmB;AAClD,aAAO,KAAK,gBAAgB;AAAA,QAC1B;AAAA,QACA,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAGA,UAAM,EAAE,OAAO,UAAU,gBAAgB,IAAI,MAAM,cAAc;AAAA,MAC/D,KAAK,eAAe,KAAK,OAAO,SAAS,KAAK,OAAO;AAAA,MACrD,SAAS;AAAA,MACT;AAAA,MACA,uBAAuB,qCAAqC;AAAA,MAC5D,2BAA2B,4BAA4B;AAAA,MACvD;AAAA,MACA,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,WAAO;AAAA,MACL,QAAQ,CAAC,QAAQ;AAAA,MACjB;AAAA,MACA,UAAU;AAAA,QACR,WAAW;AAAA,QACX,SAAS,KAAK;AAAA,QACd,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,gBAAgB;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAM6D;AAE3D,UAAM,EAAE,OAAO,eAAe,IAAI,MAAM,cAAc;AAAA,MACpD,KAAK,eAAe,KAAK,OAAO,SAAS,KAAK,OAAO;AAAA,MACrD;AAAA,MACA;AAAA,MACA,uBAAuB,qCAAqC;AAAA,MAC5D,2BAA2B;AAAA,QACzB;AAAA,MACF;AAAA,MACA;AAAA,MACA,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,UAAM,YAAY,eAAe;AAGjC,UAAM,WAAW,MAAM,KAAK,gBAAgB;AAAA,MAC1C;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAMD,UAAM,EAAE,OAAO,YAAY,gBAAgB,IAAI,MAAM,WAAW;AAAA,MAC9D,KAAK;AAAA,MACL,SAAS,aAAa,UAAU,KAAK,OAAO,OAAO,IAC/C,UACA;AAAA,MACJ;AAAA,MACA,uBAAuB,qCAAqC;AAAA,MAC5D,2BAA2B,4BAA4B;AAAA,MACvD,OAAO,KAAK,OAAO;AAAA,IACrB,CAAC;AAED,WAAO;AAAA,MACL,QAAQ,CAAC,UAAU;AAAA,MACnB;AAAA,MACA,UAAU;AAAA,QACR,WAAW;AAAA,QACX,SAAS,KAAK;AAAA,QACd,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,gBAAgB;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIoB;AAtUtB;AAuUI,UAAM,sBACJ,UAAK,OAAO,uBAAZ,YAAkC;AACpC,UAAM,qBACJ,UAAK,OAAO,sBAAZ,YAAiC;AACnC,UAAM,kBAAkB,KAAK;AAAA,MAC3B,oBAAoB,KAAK,IAAI,GAAG,kBAAkB;AAAA,IACpD;AAEA,UAAM,UAAU,mBAAmB,KAAK,OAAO,SAAS,KAAK,OAAO;AAEpE,aAAS,IAAI,GAAG,IAAI,iBAAiB,KAAK;AACxC,YAAM,EAAE,OAAO,aAAa,IAAI,MAAM,cAAc;AAAA,QAClD,KAAK;AAAA,QACL;AAAA,QACA,MAAM,EAAE,IAAI,UAAU;AAAA,QACtB,uBAAuB,qCAAqC;AAAA,QAC5D,2BAA2B;AAAA,UACzB;AAAA,QACF;AAAA,QACA;AAAA,QACA,OAAO,KAAK,OAAO;AAAA,MACrB,CAAC;AAED,YAAM,SAAS,aAAa;AAE5B,UAAI,WAAW,SAAS;AACtB,cAAM,YAAW,kBAAa,WAAb,mBAAqB;AACtC,YAAI,OAAO,aAAa,UAAU;AAChC,iBAAO;AAAA,QACT;AACA,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,UAAI,WAAW,WAAW,WAAW,UAAU;AAC7C,cAAM,IAAI;AAAA,UACR,kDAAkD,MAAM;AAAA,QAC1D;AAAA,MACF;AAGA,YAAM,MAAM,kBAAkB;AAAA,IAChC;AAEA,UAAM,IAAI;AAAA,MACR,8CAA8C,iBAAiB;AAAA,IACjE;AAAA,EACF;AACF;;;AExXA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,KAAAA,UAAS;;;AChBX,IAAM,UACX,OACI,oBACA;;;ADuBN,IAAM,uBAAuBC,GAAE,OAAO;AAAA,EACpC,OAAOA,GAAE,OAAO;AAClB,CAAC;AAED,IAAM,0BAAsE;AAAA,EAC1E,aAAa;AAAA,EACb,gBAAgB,UAAQ,KAAK;AAC/B;AAiEA,IAAM,iBAAiB;AAEhB,SAAS,gBACd,UAAqC,CAAC,GACnB;AAxGrB;AAyGE,QAAM,UAAU,sBAAqB,aAAQ,YAAR,YAAmB,cAAc;AACtE,QAAM,aAAa,MACjB;AAAA,IACE;AAAA,MACE,eAAe,UAAU,WAAW;AAAA,QAClC,QAAQ,QAAQ;AAAA,QAChB,yBAAyB;AAAA,QACzB,aAAa;AAAA,MACf,CAAC,CAAC;AAAA,MACF,GAAG,QAAQ;AAAA,IACb;AAAA,IACA,oBAAoB,OAAO;AAAA,EAC7B;AASF,QAAM,uBAAuB,CAAC,eAA0C;AAAA,IACtE,UAAU,aAAa,SAAS;AAAA,IAChC,KAAK,CAAC,EAAE,KAAK,MAAM,GAAG,OAAO,GAAG,IAAI;AAAA,IACpC,SAAS;AAAA,IACT,OAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,kBAAkB,CAAC,YAAkC;AACzD,WAAO,IAAI,kCAAkC,SAAS;AAAA,MACpD,GAAG,qBAAqB,MAAM;AAAA,MAC9B,gBAAgB;AAAA,MAChB,sBAAsB,UAAQ;AAC5B,cAAM,WAAW,KAAK;AAGtB,cAAM,mBAAmB,KAAK;AAE9B,cAAM;AAAA,UACJ,UAAU;AAAA,UACV,kBAAkB;AAAA,UAClB;AAAA,UACA,GAAG;AAAA,QACL,IAAI;AAEJ,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,oBAAoB,QAAQ;AAAA;AAAA,YAE9B,kBACE,qBAAqB,YACjB,QACA,qBAAqB,UACnB,SACA;AAAA,UACV;AAAA,UACA,GAAI,YAAY;AAAA,YACd,UAAU;AAAA,cACR,MAAM,SAAS;AAAA,cACf,GAAI,SAAS,iBAAiB,UAAa;AAAA,gBACzC,eAAe,SAAS;AAAA,cAC1B;AAAA,YACF;AAAA,UACF;AAAA,UACA,GAAI,oBAAoB;AAAA,YACtB,mBAAmB;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,wBAAwB,CAAC,YAC7B,IAAI,wCAAwC,SAAS;AAAA,IACnD,GAAG,qBAAqB,YAAY;AAAA,IACpC,gBAAgB;AAAA,EAClB,CAAC;AAEH,QAAM,uBAAuB,CAAC,YAC5B,IAAI,+BAA+B,SAAS;AAAA,IAC1C,GAAG,qBAAqB,WAAW;AAAA,IACnC,gBAAgB;AAAA,EAClB,CAAC;AAEH,QAAM,mBAAmB,CAAC,YACxB,IAAI,oBAAoB,SAAS;AAAA,IAC/B,GAAG,qBAAqB,OAAO;AAAA,IAC/B,SAAS,4BAAW;AAAA,EACtB,CAAC;AAEH,QAAM,WAAW,CAAC,YAAkC,gBAAgB,OAAO;AAE3E,WAAS,uBAAuB;AAChC,WAAS,kBAAkB;AAC3B,WAAS,YAAY;AACrB,WAAS,gBAAgB;AACzB,WAAS,iBAAiB;AAC1B,WAAS,qBAAqB;AAC9B,WAAS,QAAQ;AACjB,WAAS,aAAa;AACtB,SAAO;AACT;AAEO,IAAM,YAAY,gBAAgB;","names":["z","z"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdk/fireworks",
-  "version": "3.0.0-canary.55",
+  "version": "3.0.0-canary.56",
   "type": "module",
   "license": "Apache-2.0",
   "sideEffects": false,
@@ -29,9 +29,9 @@
     }
   },
   "dependencies": {
-    "@ai-sdk/openai-compatible": "3.0.0-canary.55",
+    "@ai-sdk/openai-compatible": "3.0.0-canary.56",
     "@ai-sdk/provider": "4.0.0-canary.18",
-    "@ai-sdk/provider-utils": "5.0.0-canary.47"
+    "@ai-sdk/provider-utils": "5.0.0-canary.48"
   },
   "devDependencies": {
     "@types/node": "22.19.19",

package/src/fireworks-image-model.ts

@@ -7,6 +7,7 @@ import {
   createStatusCodeErrorResponseHandler,
   delay,
   getFromApi,
+  isSameOrigin,
   postJsonToApi,
   serializeModelOptions,
   WORKFLOW_SERIALIZE,
@@ -286,10 +287,15 @@ export class FireworksImageModel implements ImageModelV4 {
       abortSignal,
     });
 
-    // Download the image from the URL
+    // Download the image from the URL. The URL comes from the provider
+    // response and typically points at a CDN, so only send credentials when it
+    // stays on the provider's own origin (never leak the API key to a CDN or an
+    // attacker-named host).
     const { value: imageBytes, responseHeaders } = await getFromApi({
       url: imageUrl,
-      headers,
+      headers: isSameOrigin(imageUrl, this.config.baseURL)
+        ? headers
+        : undefined,
       abortSignal,
       failedResponseHandler: createStatusCodeErrorResponseHandler(),
       successfulResponseHandler: createBinaryResponseHandler(),