@juspay/neurolink 9.63.1 → 9.65.0

package/dist/lib/utils/pricing.js

@@ -285,6 +285,177 @@ const PRICING = {
     llamacpp: {
         _default: { input: 0, output: 0 },
     },
+    xai: {
+        _default: { input: 3.0 / 1_000_000, output: 15.0 / 1_000_000 },
+        "grok-3": { input: 3.0 / 1_000_000, output: 15.0 / 1_000_000 },
+        "grok-3-mini": { input: 0.3 / 1_000_000, output: 0.5 / 1_000_000 },
+        "grok-2-latest": { input: 2.0 / 1_000_000, output: 10.0 / 1_000_000 },
+        "grok-2-vision-latest": {
+            input: 2.0 / 1_000_000,
+            output: 10.0 / 1_000_000,
+        },
+        "grok-beta": { input: 5.0 / 1_000_000, output: 15.0 / 1_000_000 },
+    },
+    groq: {
+        _default: { input: 0.59 / 1_000_000, output: 0.79 / 1_000_000 },
+        "llama-3.3-70b-versatile": {
+            input: 0.59 / 1_000_000,
+            output: 0.79 / 1_000_000,
+        },
+        "llama-3.1-8b-instant": {
+            input: 0.05 / 1_000_000,
+            output: 0.08 / 1_000_000,
+        },
+        "llama-3.2-90b-vision-preview": {
+            input: 0.9 / 1_000_000,
+            output: 0.9 / 1_000_000,
+        },
+        "llama-3.2-11b-vision-preview": {
+            input: 0.18 / 1_000_000,
+            output: 0.18 / 1_000_000,
+        },
+        "gemma2-9b-it": { input: 0.2 / 1_000_000, output: 0.2 / 1_000_000 },
+        "mixtral-8x7b-32768": {
+            input: 0.24 / 1_000_000,
+            output: 0.24 / 1_000_000,
+        },
+    },
+    cohere: {
+        _default: { input: 2.5 / 1_000_000, output: 10.0 / 1_000_000 },
+        "command-r-plus": { input: 2.5 / 1_000_000, output: 10.0 / 1_000_000 },
+        "command-r": { input: 0.15 / 1_000_000, output: 0.6 / 1_000_000 },
+        "command-r7b-12-2024": {
+            input: 0.0375 / 1_000_000,
+            output: 0.15 / 1_000_000,
+        },
+    },
+    "together-ai": {
+        _default: { input: 0.88 / 1_000_000, output: 0.88 / 1_000_000 },
+        "meta-llama/Llama-3.3-70B-Instruct-Turbo": {
+            input: 0.88 / 1_000_000,
+            output: 0.88 / 1_000_000,
+        },
+        "meta-llama/Meta-Llama-3.1-405B-Instruct-Turbo": {
+            input: 3.5 / 1_000_000,
+            output: 3.5 / 1_000_000,
+        },
+        "meta-llama/Meta-Llama-3.1-70B-Instruct-Turbo": {
+            input: 0.88 / 1_000_000,
+            output: 0.88 / 1_000_000,
+        },
+        "meta-llama/Meta-Llama-3.1-8B-Instruct-Turbo": {
+            input: 0.18 / 1_000_000,
+            output: 0.18 / 1_000_000,
+        },
+        "mistralai/Mixtral-8x22B-Instruct-v0.1": {
+            input: 1.2 / 1_000_000,
+            output: 1.2 / 1_000_000,
+        },
+        "mistralai/Mixtral-8x7B-Instruct-v0.1": {
+            input: 0.6 / 1_000_000,
+            output: 0.6 / 1_000_000,
+        },
+        "Qwen/Qwen2.5-72B-Instruct-Turbo": {
+            input: 1.2 / 1_000_000,
+            output: 1.2 / 1_000_000,
+        },
+        "deepseek-ai/DeepSeek-R1": {
+            input: 7.0 / 1_000_000,
+            output: 7.0 / 1_000_000,
+        },
+        "deepseek-ai/DeepSeek-V3": {
+            input: 1.25 / 1_000_000,
+            output: 1.25 / 1_000_000,
+        },
+    },
+    fireworks: {
+        _default: { input: 0.9 / 1_000_000, output: 0.9 / 1_000_000 },
+        "accounts/fireworks/models/llama-v3p1-70b-instruct": {
+            input: 0.9 / 1_000_000,
+            output: 0.9 / 1_000_000,
+        },
+        "accounts/fireworks/models/llama-v3p1-405b-instruct": {
+            input: 3.0 / 1_000_000,
+            output: 3.0 / 1_000_000,
+        },
+        "accounts/fireworks/models/llama-v3p1-8b-instruct": {
+            input: 0.2 / 1_000_000,
+            output: 0.2 / 1_000_000,
+        },
+        "accounts/fireworks/models/llama-v3p3-70b-instruct": {
+            input: 0.9 / 1_000_000,
+            output: 0.9 / 1_000_000,
+        },
+        "accounts/fireworks/models/mixtral-8x22b-instruct": {
+            input: 1.2 / 1_000_000,
+            output: 1.2 / 1_000_000,
+        },
+        "accounts/fireworks/models/qwen2p5-72b-instruct": {
+            input: 0.9 / 1_000_000,
+            output: 0.9 / 1_000_000,
+        },
+        "accounts/fireworks/models/qwen2p5-coder-32b-instruct": {
+            input: 0.9 / 1_000_000,
+            output: 0.9 / 1_000_000,
+        },
+        "accounts/fireworks/models/deepseek-v3": {
+            input: 0.75 / 1_000_000,
+            output: 3.0 / 1_000_000,
+        },
+    },
+    perplexity: {
+        _default: { input: 1.0 / 1_000_000, output: 1.0 / 1_000_000 },
+        sonar: { input: 1.0 / 1_000_000, output: 1.0 / 1_000_000 },
+        "sonar-pro": { input: 3.0 / 1_000_000, output: 15.0 / 1_000_000 },
+        "sonar-reasoning": { input: 1.0 / 1_000_000, output: 5.0 / 1_000_000 },
+        "sonar-reasoning-pro": {
+            input: 2.0 / 1_000_000,
+            output: 8.0 / 1_000_000,
+        },
+        "sonar-deep-research": {
+            input: 2.0 / 1_000_000,
+            output: 8.0 / 1_000_000,
+        },
+    },
+    cloudflare: {
+        // Cloudflare bills per "neuron"; symbolic per-token rate so cost
+        // attribution dashboards have non-zero values.
+        _default: { input: 0.011 / 1_000_000, output: 0.011 / 1_000_000 },
+    },
+    replicate: {
+        // Replicate bills per compute-second, not per-token. Symbolic rate.
+        _default: { input: 0.5 / 1_000_000, output: 1.5 / 1_000_000 },
+    },
+    voyage: {
+        // Voyage bills per million input tokens — output dimension is the
+        // embedding vector, not generated tokens. We charge to input only.
+        _default: { input: 0.18 / 1_000_000, output: 0 },
+        "voyage-3.5": { input: 0.06 / 1_000_000, output: 0 },
+        "voyage-3.5-lite": { input: 0.02 / 1_000_000, output: 0 },
+        "voyage-3-large": { input: 0.18 / 1_000_000, output: 0 },
+        "voyage-code-3": { input: 0.18 / 1_000_000, output: 0 },
+        "voyage-finance-2": { input: 0.12 / 1_000_000, output: 0 },
+        "voyage-law-2": { input: 0.12 / 1_000_000, output: 0 },
+        "voyage-multilingual-2": { input: 0.12 / 1_000_000, output: 0 },
+    },
+    jina: {
+        _default: { input: 0.02 / 1_000_000, output: 0 },
+        "jina-embeddings-v3": { input: 0.02 / 1_000_000, output: 0 },
+        "jina-reranker-v2-base-multilingual": {
+            input: 0.05 / 1_000_000,
+            output: 0,
+        },
+    },
+    stability: {
+        // Stability AI bills per image; symbolic per-token rate.
+        _default: { input: 0, output: 0.04 / 1_000 },
+    },
+    ideogram: {
+        _default: { input: 0, output: 0.08 / 1_000 },
+    },
+    recraft: {
+        _default: { input: 0, output: 0.04 / 1_000 },
+    },
 };
 /**
  * Map of normalized provider aliases to canonical PRICING keys.
@@ -313,6 +484,28 @@ const PROVIDER_ALIASES = {
     nvidia: "nvidia-nim",
     lmstudio: "lm-studio",
     llamacpp: "llamacpp",
+    xai: "xai",
+    grok: "xai",
+    groq: "groq",
+    cohere: "cohere",
+    togetherai: "together-ai",
+    together: "together-ai",
+    fireworks: "fireworks",
+    perplexity: "perplexity",
+    pplx: "perplexity",
+    cloudflare: "cloudflare",
+    workersai: "cloudflare",
+    cfai: "cloudflare",
+    replicate: "replicate",
+    voyage: "voyage",
+    voyageai: "voyage",
+    jina: "jina",
+    jinaai: "jina",
+    stability: "stability",
+    stabilityai: "stability",
+    sd: "stability",
+    ideogram: "ideogram",
+    recraft: "recraft",
 };
 /**
  * Look up per-token rates for a provider/model combination.

package/dist/lib/utils/providerConfig.d.ts

@@ -123,6 +123,61 @@ export declare function createLmStudioConfig(): ProviderConfigOptions;
  * Creates llama.cpp provider configuration (local server)
  */
 export declare function createLlamaCppConfig(): ProviderConfigOptions;
+/**
+ * Creates xAI Grok provider configuration.
+ */
+export declare function createXaiConfig(): ProviderConfigOptions;
+/**
+ * Creates Groq provider configuration.
+ */
+export declare function createGroqConfig(): ProviderConfigOptions;
+/**
+ * Creates Cohere provider configuration.
+ */
+export declare function createCohereConfig(): ProviderConfigOptions;
+/**
+ * Creates Replicate provider configuration.
+ */
+export declare function createReplicateConfig(): ProviderConfigOptions;
+/**
+ * Creates Together AI provider configuration.
+ */
+export declare function createTogetherAIConfig(): ProviderConfigOptions;
+/**
+ * Creates Fireworks AI provider configuration.
+ */
+export declare function createFireworksConfig(): ProviderConfigOptions;
+/**
+ * Creates Perplexity provider configuration.
+ */
+export declare function createPerplexityConfig(): ProviderConfigOptions;
+/**
+ * Creates Voyage AI provider configuration (embedding-only).
+ */
+export declare function createVoyageConfig(): ProviderConfigOptions;
+/**
+ * Creates Jina AI provider configuration (embeddings + reranking).
+ */
+export declare function createJinaConfig(): ProviderConfigOptions;
+/**
+ * Creates Stability AI provider configuration (image generation).
+ */
+export declare function createStabilityConfig(): ProviderConfigOptions;
+/**
+ * Creates Ideogram provider configuration (image generation).
+ */
+export declare function createIdeogramConfig(): ProviderConfigOptions;
+/**
+ * Creates Recraft provider configuration (image generation, vector focus).
+ */
+export declare function createRecraftConfig(): ProviderConfigOptions;
+/**
+ * Creates Cloudflare Workers AI provider configuration.
+ *
+ * Cloudflare requires both `CLOUDFLARE_API_KEY` (workers-AI-scoped token)
+ * AND `CLOUDFLARE_ACCOUNT_ID` since the endpoint is per-account.
+ */
+export declare function createCloudflareConfig(): ProviderConfigOptions;
 /**
  * Creates Google Vertex Project ID configuration
  */

package/dist/lib/utils/providerConfig.js

@@ -448,6 +448,230 @@ export function createLlamaCppConfig() {
         optional: true,
     };
 }
+/**
+ * Creates xAI Grok provider configuration.
+ */
+export function createXaiConfig() {
+    return {
+        providerName: "xAI",
+        envVarName: "XAI_API_KEY",
+        setupUrl: "https://console.x.ai/",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://console.x.ai/",
+            "2. Sign in with your xAI account",
+            "3. Create an API key",
+            "4. Set XAI_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Groq provider configuration.
+ */
+export function createGroqConfig() {
+    return {
+        providerName: "Groq",
+        envVarName: "GROQ_API_KEY",
+        setupUrl: "https://console.groq.com/keys",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://console.groq.com/keys",
+            "2. Sign in to your Groq account",
+            "3. Create a new API key",
+            "4. Set GROQ_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Cohere provider configuration.
+ */
+export function createCohereConfig() {
+    return {
+        providerName: "Cohere",
+        envVarName: "COHERE_API_KEY",
+        setupUrl: "https://dashboard.cohere.com/api-keys",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://dashboard.cohere.com/api-keys",
+            "2. Sign in to your Cohere account",
+            "3. Create a new API key",
+            "4. Set COHERE_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Replicate provider configuration.
+ */
+export function createReplicateConfig() {
+    return {
+        providerName: "Replicate",
+        envVarName: "REPLICATE_API_TOKEN",
+        setupUrl: "https://replicate.com/account/api-tokens",
+        description: "API token",
+        instructions: [
+            "1. Visit: https://replicate.com/account/api-tokens",
+            "2. Sign in to your Replicate account",
+            "3. Create a new API token",
+            "4. Set REPLICATE_API_TOKEN in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Together AI provider configuration.
+ */
+export function createTogetherAIConfig() {
+    return {
+        providerName: "Together AI",
+        envVarName: "TOGETHER_API_KEY",
+        setupUrl: "https://api.together.xyz/settings/api-keys",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://api.together.xyz/settings/api-keys",
+            "2. Sign in to your Together AI account",
+            "3. Create a new API key",
+            "4. Set TOGETHER_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Fireworks AI provider configuration.
+ */
+export function createFireworksConfig() {
+    return {
+        providerName: "Fireworks AI",
+        envVarName: "FIREWORKS_API_KEY",
+        setupUrl: "https://fireworks.ai/account/api-keys",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://fireworks.ai/account/api-keys",
+            "2. Sign in to your Fireworks AI account",
+            "3. Create a new API key",
+            "4. Set FIREWORKS_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Perplexity provider configuration.
+ */
+export function createPerplexityConfig() {
+    return {
+        providerName: "Perplexity",
+        envVarName: "PERPLEXITY_API_KEY",
+        setupUrl: "https://www.perplexity.ai/settings/api",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://www.perplexity.ai/settings/api",
+            "2. Sign in to your Perplexity account",
+            "3. Create a new API key (Sonar tier)",
+            "4. Set PERPLEXITY_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Voyage AI provider configuration (embedding-only).
+ */
+export function createVoyageConfig() {
+    return {
+        providerName: "Voyage AI",
+        envVarName: "VOYAGE_API_KEY",
+        setupUrl: "https://dash.voyageai.com/api-keys",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://dash.voyageai.com/api-keys",
+            "2. Sign in to your Voyage AI account",
+            "3. Create a new API key",
+            "4. Set VOYAGE_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Jina AI provider configuration (embeddings + reranking).
+ */
+export function createJinaConfig() {
+    return {
+        providerName: "Jina AI",
+        envVarName: "JINA_API_KEY",
+        setupUrl: "https://jina.ai/?sui=apikey",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://jina.ai/?sui=apikey",
+            "2. Sign in / create account",
+            "3. Copy your API key",
+            "4. Set JINA_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Stability AI provider configuration (image generation).
+ */
+export function createStabilityConfig() {
+    return {
+        providerName: "Stability AI",
+        envVarName: "STABILITY_API_KEY",
+        setupUrl: "https://platform.stability.ai/account/keys",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://platform.stability.ai/account/keys",
+            "2. Sign in to your Stability AI account",
+            "3. Create a new API key",
+            "4. Set STABILITY_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Ideogram provider configuration (image generation).
+ */
+export function createIdeogramConfig() {
+    return {
+        providerName: "Ideogram",
+        envVarName: "IDEOGRAM_API_KEY",
+        setupUrl: "https://developer.ideogram.ai/",
+        description: "API key",
+        instructions: [
+            "1. Visit: https://developer.ideogram.ai/",
+            "2. Sign in / create account",
+            "3. Generate a new API key",
+            "4. Set IDEOGRAM_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Recraft provider configuration (image generation, vector focus).
+ */
+export function createRecraftConfig() {
+    return {
+        providerName: "Recraft",
+        envVarName: "RECRAFT_API_KEY",
+        setupUrl: "https://www.recraft.ai/api",
+        description: "API token",
+        instructions: [
+            "1. Visit: https://www.recraft.ai/api",
+            "2. Sign in / create account",
+            "3. Create an API token",
+            "4. Set RECRAFT_API_KEY in your .env file",
+        ],
+    };
+}
+/**
+ * Creates Cloudflare Workers AI provider configuration.
+ *
+ * Cloudflare requires both `CLOUDFLARE_API_KEY` (workers-AI-scoped token)
+ * AND `CLOUDFLARE_ACCOUNT_ID` since the endpoint is per-account.
+ */
+export function createCloudflareConfig() {
+    return {
+        providerName: "Cloudflare Workers AI",
+        envVarName: "CLOUDFLARE_API_KEY",
+        setupUrl: "https://dash.cloudflare.com/profile/api-tokens",
+        description: "API token (Workers AI Read+Write scope)",
+        instructions: [
+            "1. Visit: https://dash.cloudflare.com/profile/api-tokens",
+            "2. Create a token with 'Workers AI: Read + Write' scope",
+            "3. Set CLOUDFLARE_API_KEY in your .env file",
+            "4. Also set CLOUDFLARE_ACCOUNT_ID (find it in the dashboard URL or under 'Account ID')",
+        ],
+    };
+}
 /**
  * Creates Google Vertex Project ID configuration
  */

package/dist/lib/utils/providerHealth.js

@@ -349,7 +349,7 @@ export class ProviderHealthChecker {
                     `    • claude-sonnet-4@20250514, claude-opus-4@20250514\n` +
                     `    • claude-3-5-sonnet-20241022, claude-3-5-haiku-20241022\n` +
                     `    • claude-3-sonnet-20240229, claude-3-haiku-20240307, claude-3-opus-20240229\n` +
-                    `  Implementation: Uses @ai-sdk/google-vertex with dual provider setup\n` +
+                    `  Implementation: Uses native SDKs (@google/genai for Gemini, @anthropic-ai/vertex-sdk for Claude)\n` +
                     `  Authentication: Requires Google Cloud project with Vertex AI API enabled\n` +
                     `  Note: Anthropic models require Anthropic integration in your Google Cloud project`);
             }
@@ -969,13 +969,13 @@ export class ProviderHealthChecker {
         logger.debug("Starting comprehensive Vertex Anthropic support verification");
         try {
             // 1. Check SDK module availability
-            logger.debug("Checking @ai-sdk/google-vertex/anthropic module availability");
-            const anthropicModule = await import("@ai-sdk/google-vertex/anthropic");
+            logger.debug("Checking @anthropic-ai/vertex-sdk module availability");
+            const anthropicModule = await import("@anthropic-ai/vertex-sdk");
             result.hasCreateVertexAnthropic =
-                typeof anthropicModule.createVertexAnthropic === "function";
-            result.hasCorrectTypes = true; // Types are bundled with the function
+                typeof anthropicModule.AnthropicVertex === "function";
+            result.hasCorrectTypes = true; // Types are bundled with the class
             if (!result.hasCreateVertexAnthropic) {
-                result.troubleshooting.push("📦 Update @ai-sdk/google-vertex to latest version with Anthropic support", "🔄 Run: npm install @ai-sdk/google-vertex@latest", "📖 See: https://sdk.vercel.ai/providers/ai-sdk-providers/google-vertex#anthropic-models");
+                result.troubleshooting.push("📦 Install @anthropic-ai/vertex-sdk for Claude on Vertex AI support", "🔄 Run: npm install @anthropic-ai/vertex-sdk", "📖 See: https://docs.anthropic.com/en/api/claude-on-vertex-ai");
                 return result;
             }
             logger.debug("SDK module verified successfully");
@@ -1065,7 +1065,7 @@ export class ProviderHealthChecker {
                 error: error instanceof Error ? error.message : String(error),
                 stack: error instanceof Error ? error.stack : undefined,
             });
-            result.recommendations.push("❌ Comprehensive Anthropic support check failed", `🐛 Error: ${error instanceof Error ? error.message : String(error)}`, "", "🔧 Troubleshooting steps:", "1. Update @ai-sdk/google-vertex to latest version", "2. Verify Google Cloud authentication setup", "3. Check project ID and region configuration", "4. Enable Vertex AI API in Google Cloud Console", "5. Enable Anthropic integration in Vertex AI Model Garden");
+            result.recommendations.push("❌ Comprehensive Anthropic support check failed", `🐛 Error: ${error instanceof Error ? error.message : String(error)}`, "", "🔧 Troubleshooting steps:", "1. Verify @google-cloud/vertexai and @anthropic-ai/vertex-sdk are properly installed", "2. Verify Google Cloud authentication setup", "3. Check project ID and region configuration", "4. Enable Vertex AI API in Google Cloud Console", "5. Enable Anthropic integration in Vertex AI Model Garden");
         }
         return result;
     }

package/dist/lib/utils/safeFetch.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Safe Fetch — SSRF-hardened binary download helper.
+ *
+ * Combines:
+ *   - `assertSafeUrl` (validates and rejects blocked IPs)
+ *   - undici `Agent` with custom `connect.lookup` so the actual connection
+ *     uses the IP we validated (closes the DNS-rebinding window where the
+ *     resolver returns a public IP for the guard but a private IP for the
+ *     real request).
+ *   - `readBoundedBuffer` for size cap.
+ *   - `redirect: "manual"` so a 3xx → private-IP redirect can't bypass
+ *     the guard.
+ *
+ * Use this for **every** download of an external (caller-supplied or
+ * third-party-returned) URL. Direct `fetch(url)` of such URLs is unsafe.
+ *
+ * @module utils/safeFetch
+ */
+import type { SafeDownloadOptions } from "../types/index.js";
+/**
+ * Safely download a binary asset from an external URL.
+ *
+ * @throws {Error} if the URL is unsafe, the response is too large, a redirect
+ *   is encountered, or the HTTP status indicates failure.
+ */
+export declare function safeDownload(url: string, options: SafeDownloadOptions): Promise<Buffer>;

package/dist/lib/utils/safeFetch.js

@@ -0,0 +1,83 @@
+/**
+ * Safe Fetch — SSRF-hardened binary download helper.
+ *
+ * Combines:
+ *   - `assertSafeUrl` (validates and rejects blocked IPs)
+ *   - undici `Agent` with custom `connect.lookup` so the actual connection
+ *     uses the IP we validated (closes the DNS-rebinding window where the
+ *     resolver returns a public IP for the guard but a private IP for the
+ *     real request).
+ *   - `readBoundedBuffer` for size cap.
+ *   - `redirect: "manual"` so a 3xx → private-IP redirect can't bypass
+ *     the guard.
+ *
+ * Use this for **every** download of an external (caller-supplied or
+ * third-party-returned) URL. Direct `fetch(url)` of such URLs is unsafe.
+ *
+ * @module utils/safeFetch
+ */
+import { Agent, fetch as undiciFetch } from "undici";
+import { readBoundedBuffer } from "./sizeGuard.js";
+import { validateAndResolveUrl } from "./ssrfGuard.js";
+const DEFAULT_TIMEOUT_MS = 60_000;
+/**
+ * Build a once-off undici Agent whose connect lookup resolves `hostname` to a
+ * fixed IP. This pins the actual TCP connection to the IP we validated,
+ * removing the DNS-rebinding window.
+ */
+function buildPinnedAgent(hostname, ip, family) {
+    return new Agent({
+        connect: {
+            lookup: (host, _options, callback) => {
+                if (host.toLowerCase() !== hostname.toLowerCase()) {
+                    // The host the connect layer asks for differs from the URL host —
+                    // this happens for absolute Host headers etc. Reject defensively.
+                    callback(new Error(`safeFetch: refusing to resolve "${host}" — expected "${hostname}"`), "", 0);
+                    return;
+                }
+                callback(null, ip, family);
+            },
+        },
+    });
+}
+/**
+ * Safely download a binary asset from an external URL.
+ *
+ * @throws {Error} if the URL is unsafe, the response is too large, a redirect
+ *   is encountered, or the HTTP status indicates failure.
+ */
+export async function safeDownload(url, options) {
+    const { url: validatedUrl, ip, family } = await validateAndResolveUrl(url);
+    const parsed = new URL(validatedUrl);
+    const hostname = parsed.hostname.replace(/^\[|\]$/g, "");
+    const agent = buildPinnedAgent(hostname, ip, family);
+    const timeoutCtrl = new AbortController();
+    const timeoutId = setTimeout(() => timeoutCtrl.abort(), options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    const composedSignal = options.signal
+        ? AbortSignal.any([options.signal, timeoutCtrl.signal])
+        : timeoutCtrl.signal;
+    let response;
+    try {
+        response = await undiciFetch(validatedUrl, {
+            method: "GET",
+            signal: composedSignal,
+            redirect: "manual", // a 3xx → private-IP redirect would bypass the guard
+            dispatcher: agent,
+        });
+    }
+    finally {
+        clearTimeout(timeoutId);
+        // Close the per-request agent so the pinned connection isn't pooled.
+        agent.close().catch(() => undefined);
+    }
+    if (response.status >= 300 && response.status < 400) {
+        throw new Error(`safeDownload(${options.label}): refused to follow redirect ${response.status} → ${response.headers.get("location") ?? "<no-location>"} (for ${url})`);
+    }
+    if (!response.ok) {
+        throw new Error(`safeDownload(${options.label}) failed: HTTP ${response.status} for ${url}`);
+    }
+    // readBoundedBuffer expects a Response that exposes Content-Length and
+    // arrayBuffer(). undici Response satisfies both.
+    return readBoundedBuffer(response, options.maxBytes, options.label);
+}
+//# sourceMappingURL=safeFetch.js.map

package/dist/lib/utils/schemaConversion.d.ts

@@ -27,7 +27,7 @@ export declare function ensureNestedSchemaTypes(schema: Record<string, unknown>)
  * 2. AI SDK `jsonSchema()` wrappers (have `.jsonSchema` property) -- extracted directly
  * 3. Plain JSON Schema objects (have `type`/`properties` but no `_def`) -- returned as-is
  */
-export declare function convertZodToJsonSchema(zodSchema: ZodUnknownSchema): object;
+export declare function convertZodToJsonSchema(zodSchema: ZodUnknownSchema, target?: "jsonSchema7" | "openApi3"): object;
 export declare function normalizeJsonSchemaObject(schema: Record<string, unknown> | undefined | null): Record<string, unknown>;
 /**
  * Check if a value is a Zod schema