@puckeditor/cloud-client 0.8.0-canary.fed2989a → 0.8.0

package/dist/index.js

@@ -9,8 +9,8 @@ var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
 var __export = (target, all) => {
-  for (var name21 in all)
-    __defProp(target, name21, { get: all[name21], enumerable: true });
+  for (var name23 in all)
+    __defProp(target, name23, { get: all[name23], enumerable: true });
 };
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
@@ -58,13 +58,13 @@ var tool = (t) => t;
 // src/api/chat.ts
 init_react_import();
 
-// ../../node_modules/.pnpm/ai@6.0.197_zod@4.3.6/node_modules/ai/dist/index.mjs
+// ../../node_modules/.pnpm/ai@6.0.230_zod@4.3.6/node_modules/ai/dist/index.mjs
 init_react_import();
 
-// ../../node_modules/.pnpm/@ai-sdk+provider-utils@4.0.27_zod@4.3.6/node_modules/@ai-sdk/provider-utils/dist/index.mjs
+// ../../node_modules/.pnpm/@ai-sdk+provider-utils@4.0.40_zod@4.3.6/node_modules/@ai-sdk/provider-utils/dist/index.mjs
 init_react_import();
 
-// ../../node_modules/.pnpm/@ai-sdk+provider@3.0.10/node_modules/@ai-sdk/provider/dist/index.mjs
+// ../../node_modules/.pnpm/@ai-sdk+provider@3.0.14/node_modules/@ai-sdk/provider/dist/index.mjs
 init_react_import();
 var marker = "vercel.ai.error";
 var symbol = Symbol.for(marker);
@@ -944,7 +944,7 @@ var NEVER = Object.freeze({
   status: "aborted"
 });
 // @__NO_SIDE_EFFECTS__
-function $constructor(name21, initializer3, params) {
+function $constructor(name23, initializer3, params) {
   function init(inst, def) {
     if (!inst._zod) {
       Object.defineProperty(inst, "_zod", {
@@ -956,10 +956,10 @@ function $constructor(name21, initializer3, params) {
         enumerable: false
       });
     }
-    if (inst._zod.traits.has(name21)) {
+    if (inst._zod.traits.has(name23)) {
       return;
     }
-    inst._zod.traits.add(name21);
+    inst._zod.traits.add(name23);
     initializer3(inst, def);
     const proto = _.prototype;
     const keys = Object.keys(proto);
@@ -973,12 +973,12 @@ function $constructor(name21, initializer3, params) {
   const Parent = params?.Parent ?? Object;
   class Definition extends Parent {
   }
-  Object.defineProperty(Definition, "name", { value: name21 });
+  Object.defineProperty(Definition, "name", { value: name23 });
   function _(def) {
-    var _a21;
+    var _a23;
     const inst = params?.Parent ? new Definition() : this;
     init(inst, def);
-    (_a21 = inst._zod).deferred ?? (_a21.deferred = []);
+    (_a23 = inst._zod).deferred ?? (_a23.deferred = []);
     for (const fn of inst._zod.deferred) {
       fn();
     }
@@ -989,10 +989,10 @@ function $constructor(name21, initializer3, params) {
     value: (inst) => {
       if (params?.Parent && inst instanceof params.Parent)
         return true;
-      return inst?._zod?.traits?.has(name21);
+      return inst?._zod?.traits?.has(name23);
     }
   });
-  Object.defineProperty(_, "name", { value: name21 });
+  Object.defineProperty(_, "name", { value: name23 });
   return _;
 }
 var $brand = Symbol("zod_brand");
@@ -1002,8 +1002,8 @@ var $ZodAsyncError = class extends Error {
   }
 };
 var $ZodEncodeError = class extends Error {
-  constructor(name21) {
-    super(`Encountered unidirectional transform during encode: ${name21}`);
+  constructor(name23) {
+    super(`Encountered unidirectional transform during encode: ${name23}`);
     this.name = "ZodEncodeError";
   }
 };
@@ -1582,8 +1582,8 @@ function aborted(x, startIndex = 0) {
 }
 function prefixIssues(path, issues) {
   return issues.map((iss) => {
-    var _a21;
-    (_a21 = iss).path ?? (_a21.path = []);
+    var _a23;
+    (_a23 = iss).path ?? (_a23.path = []);
     iss.path.unshift(path);
     return iss;
   });
@@ -1768,7 +1768,7 @@ function formatError(error48, mapper = (issue2) => issue2.message) {
 function treeifyError(error48, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
   const processError = (error49, path = []) => {
-    var _a21, _b16;
+    var _a23, _b16;
     for (const issue2 of error49.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
         issue2.errors.map((issues) => processError({ issues }, issue2.path));
@@ -1789,7 +1789,7 @@ function treeifyError(error48, mapper = (issue2) => issue2.message) {
           const terminal = i === fullpath.length - 1;
           if (typeof el === "string") {
             curr.properties ?? (curr.properties = {});
-            (_a21 = curr.properties)[el] ?? (_a21[el] = { errors: [] });
+            (_a23 = curr.properties)[el] ?? (_a23[el] = { errors: [] });
             curr = curr.properties[el];
           } else {
             curr.items ?? (curr.items = []);
@@ -2090,10 +2090,10 @@ var sha512_base64url = /* @__PURE__ */ fixedBase64url(86);
 
 // ../../node_modules/.pnpm/zod@4.3.6/node_modules/zod/v4/core/checks.js
 var $ZodCheck = /* @__PURE__ */ $constructor("$ZodCheck", (inst, def) => {
-  var _a21;
+  var _a23;
   inst._zod ?? (inst._zod = {});
   inst._zod.def = def;
-  (_a21 = inst._zod).onattach ?? (_a21.onattach = []);
+  (_a23 = inst._zod).onattach ?? (_a23.onattach = []);
 });
 var numericOriginMap = {
   number: "number",
@@ -2159,8 +2159,8 @@ var $ZodCheckGreaterThan = /* @__PURE__ */ $constructor("$ZodCheckGreaterThan",
 var $ZodCheckMultipleOf = /* @__PURE__ */ $constructor("$ZodCheckMultipleOf", (inst, def) => {
   $ZodCheck.init(inst, def);
   inst._zod.onattach.push((inst2) => {
-    var _a21;
-    (_a21 = inst2._zod.bag).multipleOf ?? (_a21.multipleOf = def.value);
+    var _a23;
+    (_a23 = inst2._zod.bag).multipleOf ?? (_a23.multipleOf = def.value);
   });
   inst._zod.check = (payload) => {
     if (typeof payload.value !== typeof def.value)
@@ -2293,9 +2293,9 @@ var $ZodCheckBigIntFormat = /* @__PURE__ */ $constructor("$ZodCheckBigIntFormat"
   };
 });
 var $ZodCheckMaxSize = /* @__PURE__ */ $constructor("$ZodCheckMaxSize", (inst, def) => {
-  var _a21;
+  var _a23;
   $ZodCheck.init(inst, def);
-  (_a21 = inst._zod.def).when ?? (_a21.when = (payload) => {
+  (_a23 = inst._zod.def).when ?? (_a23.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.size !== void 0;
   });
@@ -2321,9 +2321,9 @@ var $ZodCheckMaxSize = /* @__PURE__ */ $constructor("$ZodCheckMaxSize", (inst, d
   };
 });
 var $ZodCheckMinSize = /* @__PURE__ */ $constructor("$ZodCheckMinSize", (inst, def) => {
-  var _a21;
+  var _a23;
   $ZodCheck.init(inst, def);
-  (_a21 = inst._zod.def).when ?? (_a21.when = (payload) => {
+  (_a23 = inst._zod.def).when ?? (_a23.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.size !== void 0;
   });
@@ -2349,9 +2349,9 @@ var $ZodCheckMinSize = /* @__PURE__ */ $constructor("$ZodCheckMinSize", (inst, d
   };
 });
 var $ZodCheckSizeEquals = /* @__PURE__ */ $constructor("$ZodCheckSizeEquals", (inst, def) => {
-  var _a21;
+  var _a23;
   $ZodCheck.init(inst, def);
-  (_a21 = inst._zod.def).when ?? (_a21.when = (payload) => {
+  (_a23 = inst._zod.def).when ?? (_a23.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.size !== void 0;
   });
@@ -2379,9 +2379,9 @@ var $ZodCheckSizeEquals = /* @__PURE__ */ $constructor("$ZodCheckSizeEquals", (i
   };
 });
 var $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (inst, def) => {
-  var _a21;
+  var _a23;
   $ZodCheck.init(inst, def);
-  (_a21 = inst._zod.def).when ?? (_a21.when = (payload) => {
+  (_a23 = inst._zod.def).when ?? (_a23.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.length !== void 0;
   });
@@ -2408,9 +2408,9 @@ var $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (ins
   };
 });
 var $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (inst, def) => {
-  var _a21;
+  var _a23;
   $ZodCheck.init(inst, def);
-  (_a21 = inst._zod.def).when ?? (_a21.when = (payload) => {
+  (_a23 = inst._zod.def).when ?? (_a23.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.length !== void 0;
   });
@@ -2437,9 +2437,9 @@ var $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (ins
   };
 });
 var $ZodCheckLengthEquals = /* @__PURE__ */ $constructor("$ZodCheckLengthEquals", (inst, def) => {
-  var _a21;
+  var _a23;
   $ZodCheck.init(inst, def);
-  (_a21 = inst._zod.def).when ?? (_a21.when = (payload) => {
+  (_a23 = inst._zod.def).when ?? (_a23.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.length !== void 0;
   });
@@ -2468,7 +2468,7 @@ var $ZodCheckLengthEquals = /* @__PURE__ */ $constructor("$ZodCheckLengthEquals"
   };
 });
 var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat", (inst, def) => {
-  var _a21, _b16;
+  var _a23, _b16;
   $ZodCheck.init(inst, def);
   inst._zod.onattach.push((inst2) => {
     const bag = inst2._zod.bag;
@@ -2479,7 +2479,7 @@ var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat"
     }
   });
   if (def.pattern)
-    (_a21 = inst._zod).check ?? (_a21.check = (payload) => {
+    (_a23 = inst._zod).check ?? (_a23.check = (payload) => {
       def.pattern.lastIndex = 0;
       if (def.pattern.test(payload.value))
         return;
@@ -2683,7 +2683,7 @@ var version = {
 
 // ../../node_modules/.pnpm/zod@4.3.6/node_modules/zod/v4/core/schemas.js
 var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
-  var _a21;
+  var _a23;
   inst ?? (inst = {});
   inst._zod.def = def;
   inst._zod.bag = inst._zod.bag || {};
@@ -2698,7 +2698,7 @@ var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
     }
   }
   if (checks.length === 0) {
-    (_a21 = inst._zod).deferred ?? (_a21.deferred = []);
+    (_a23 = inst._zod).deferred ?? (_a23.deferred = []);
     inst._zod.deferred?.push(() => {
       inst._zod.run = inst._zod.parse;
     });
@@ -11398,7 +11398,7 @@ function initializeContext(params) {
   };
 }
 function process2(schema, ctx, _params = { path: [], schemaPath: [] }) {
-  var _a21;
+  var _a23;
   const def = schema._zod.def;
   const seen = ctx.seen.get(schema);
   if (seen) {
@@ -11446,7 +11446,7 @@ function process2(schema, ctx, _params = { path: [], schemaPath: [] }) {
     delete result.schema.default;
   }
   if (ctx.io === "input" && result.schema._prefault)
-    (_a21 = result.schema).default ?? (_a21.default = result.schema._prefault);
+    (_a23 = result.schema).default ?? (_a23.default = result.schema._prefault);
   delete result.schema._prefault;
   const _result = ctx.seen.get(schema);
   return _result.schema;
@@ -18181,8 +18181,15 @@ var nullableType = ZodNullable2.create;
 var preprocessType = ZodEffects.createWithPreprocess;
 var pipelineType = ZodPipeline.create;
 
-// ../../node_modules/.pnpm/@ai-sdk+provider-utils@4.0.27_zod@4.3.6/node_modules/@ai-sdk/provider-utils/dist/index.mjs
+// ../../node_modules/.pnpm/@ai-sdk+provider-utils@4.0.40_zod@4.3.6/node_modules/@ai-sdk/provider-utils/dist/index.mjs
 var { btoa: btoa2, atob: atob2 } = globalThis;
+async function cancelResponseBody(response) {
+  var _a23;
+  try {
+    await ((_a23 = response.body) == null ? void 0 : _a23.cancel());
+  } catch (e) {
+  }
+}
 var name14 = "AI_DownloadError";
 var marker15 = `vercel.ai.error.${name14}`;
 var symbol16 = Symbol.for(marker15);
@@ -18206,58 +18213,8 @@ var DownloadError = class extends (_b15 = AISDKError, _a16 = symbol16, _b15) {
     return AISDKError.hasMarker(error48, marker15);
   }
 };
-var DEFAULT_MAX_DOWNLOAD_SIZE = 2 * 1024 * 1024 * 1024;
-async function readResponseWithSizeLimit({
-  response,
-  url: url2,
-  maxBytes = DEFAULT_MAX_DOWNLOAD_SIZE
-}) {
-  const contentLength = response.headers.get("content-length");
-  if (contentLength != null) {
-    const length = parseInt(contentLength, 10);
-    if (!isNaN(length) && length > maxBytes) {
-      throw new DownloadError({
-        url: url2,
-        message: `Download of ${url2} exceeded maximum size of ${maxBytes} bytes (Content-Length: ${length}).`
-      });
-    }
-  }
-  const body = response.body;
-  if (body == null) {
-    return new Uint8Array(0);
-  }
-  const reader = body.getReader();
-  const chunks = [];
-  let totalBytes = 0;
-  try {
-    while (true) {
-      const { done, value } = await reader.read();
-      if (done) {
-        break;
-      }
-      totalBytes += value.length;
-      if (totalBytes > maxBytes) {
-        throw new DownloadError({
-          url: url2,
-          message: `Download of ${url2} exceeded maximum size of ${maxBytes} bytes.`
-        });
-      }
-      chunks.push(value);
-    }
-  } finally {
-    try {
-      await reader.cancel();
-    } finally {
-      reader.releaseLock();
-    }
-  }
-  const result = new Uint8Array(totalBytes);
-  let offset = 0;
-  for (const chunk of chunks) {
-    result.set(chunk, offset);
-    offset += chunk.length;
-  }
-  return result;
+function isBrowserRuntime(globalThisAny = globalThis) {
+  return globalThisAny.window != null;
 }
 function validateDownloadUrl(url2) {
   let parsed;
@@ -18278,7 +18235,7 @@ function validateDownloadUrl(url2) {
       message: `URL scheme must be http, https, or data, got ${parsed.protocol}`
     });
   }
-  const hostname3 = parsed.hostname;
+  const hostname3 = parsed.hostname.toLowerCase().replace(/\.+$/, "");
   if (!hostname3) {
     throw new DownloadError({
       url: url2,
@@ -18321,41 +18278,175 @@ function isIPv4(hostname3) {
 }
 function isPrivateIPv4(ip) {
   const parts = ip.split(".").map(Number);
-  const [a, b] = parts;
+  const [a, b, c] = parts;
   if (a === 0) return true;
   if (a === 10) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
   if (a === 127) return true;
   if (a === 169 && b === 254) return true;
   if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 0 && c === 0) return true;
   if (a === 192 && b === 168) return true;
+  if (a === 198 && (b === 18 || b === 19)) return true;
+  if (a >= 240) return true;
   return false;
 }
+function parseIPv6(ip) {
+  let address = ip.toLowerCase();
+  const zoneIndex = address.indexOf("%");
+  if (zoneIndex !== -1) {
+    address = address.slice(0, zoneIndex);
+  }
+  const halves = address.split("::");
+  if (halves.length > 2) return null;
+  const toGroups = (segment) => {
+    if (segment === "") return [];
+    const groups = [];
+    const parts = segment.split(":");
+    for (let i = 0; i < parts.length; i++) {
+      const part = parts[i];
+      if (part.includes(".")) {
+        if (i !== parts.length - 1 || !isIPv4(part)) return null;
+        const [a, b, c, d] = part.split(".").map(Number);
+        groups.push(a << 8 | b, c << 8 | d);
+        continue;
+      }
+      if (!/^[0-9a-f]{1,4}$/.test(part)) return null;
+      groups.push(parseInt(part, 16));
+    }
+    return groups;
+  };
+  const head = toGroups(halves[0]);
+  if (head === null) return null;
+  if (halves.length === 2) {
+    const tail = toGroups(halves[1]);
+    if (tail === null) return null;
+    const fill = 8 - head.length - tail.length;
+    if (fill < 0) return null;
+    return [...head, ...new Array(fill).fill(0), ...tail];
+  }
+  return head.length === 8 ? head : null;
+}
 function isPrivateIPv6(ip) {
-  const normalized = ip.toLowerCase();
-  if (normalized === "::1") return true;
-  if (normalized === "::") return true;
-  if (normalized.startsWith("::ffff:")) {
-    const mappedPart = normalized.slice(7);
-    if (isIPv4(mappedPart)) {
-      return isPrivateIPv4(mappedPart);
-    }
-    const hexParts = mappedPart.split(":");
-    if (hexParts.length === 2) {
-      const high = parseInt(hexParts[0], 16);
-      const low = parseInt(hexParts[1], 16);
-      if (!isNaN(high) && !isNaN(low)) {
-        const a = high >> 8 & 255;
-        const b = high & 255;
-        const c = low >> 8 & 255;
-        const d = low & 255;
-        return isPrivateIPv4(`${a}.${b}.${c}.${d}`);
-      }
-    }
-  }
-  if (normalized.startsWith("fc") || normalized.startsWith("fd")) return true;
-  if (normalized.startsWith("fe80")) return true;
+  const groups = parseIPv6(ip);
+  if (groups === null) return true;
+  const topZero = (count) => groups.slice(0, count).every((group) => group === 0);
+  if (topZero(7) && (groups[7] === 0 || groups[7] === 1)) return true;
+  if ((groups[0] & 65024) === 64512) return true;
+  if ((groups[0] & 65472) === 65152) return true;
+  if ((groups[0] & 65472) === 65216) return true;
+  if ((groups[0] & 65280) === 65280) return true;
+  const embedsIPv4 = (
+    // ::/96 — IPv4-compatible (deprecated)
+    topZero(6) || // ::ffff:0:0/96 — IPv4-mapped (ffff in group 5)
+    topZero(5) && groups[5] === 65535 || // ::ffff:0:0/96 — IPv4-translated form (ffff in group 4, group 5 zero)
+    topZero(4) && groups[4] === 65535 && groups[5] === 0 || // 64:ff9b::/96 — NAT64 well-known prefix
+    groups[0] === 100 && groups[1] === 65435 && groups[2] === 0 && groups[3] === 0 && groups[4] === 0 && groups[5] === 0 || // 64:ff9b:1::/48 — NAT64 local-use prefix
+    groups[0] === 100 && groups[1] === 65435 && groups[2] === 1
+  );
+  if (embedsIPv4) {
+    const a = groups[6] >> 8 & 255;
+    const b = groups[6] & 255;
+    const c = groups[7] >> 8 & 255;
+    const d = groups[7] & 255;
+    return isPrivateIPv4(`${a}.${b}.${c}.${d}`);
+  }
   return false;
 }
+var MAX_DOWNLOAD_REDIRECTS = 10;
+async function fetchWithValidatedRedirects({
+  url: url2,
+  headers,
+  abortSignal,
+  maxRedirects = MAX_DOWNLOAD_REDIRECTS
+}) {
+  const baseInit = { signal: abortSignal };
+  if (headers !== void 0) {
+    baseInit.headers = headers;
+  }
+  let currentUrl = url2;
+  for (let redirectCount = 0; redirectCount <= maxRedirects; redirectCount++) {
+    validateDownloadUrl(currentUrl);
+    const response = await fetch(currentUrl, {
+      ...baseInit,
+      redirect: "manual"
+    });
+    if (response.type === "opaqueredirect") {
+      if (!isBrowserRuntime()) {
+        throw new DownloadError({
+          url: url2,
+          message: `Redirect from ${currentUrl} could not be validated and was blocked`
+        });
+      }
+      return await fetch(currentUrl, { ...baseInit, redirect: "follow" });
+    }
+    const location = response.headers.get("location");
+    if (response.status >= 300 && response.status < 400 && location) {
+      await cancelResponseBody(response);
+      currentUrl = new URL(location, currentUrl).toString();
+      continue;
+    }
+    return response;
+  }
+  throw new DownloadError({
+    url: url2,
+    message: `Too many redirects (max ${maxRedirects})`
+  });
+}
+var DEFAULT_MAX_DOWNLOAD_SIZE = 2 * 1024 * 1024 * 1024;
+async function readResponseWithSizeLimit({
+  response,
+  url: url2,
+  maxBytes = DEFAULT_MAX_DOWNLOAD_SIZE
+}) {
+  const contentLength = response.headers.get("content-length");
+  if (contentLength != null) {
+    const length = parseInt(contentLength, 10);
+    if (!isNaN(length) && length > maxBytes) {
+      await cancelResponseBody(response);
+      throw new DownloadError({
+        url: url2,
+        message: `Download of ${url2} exceeded maximum size of ${maxBytes} bytes (Content-Length: ${length}).`
+      });
+    }
+  }
+  const body = response.body;
+  if (body == null) {
+    return new Uint8Array(0);
+  }
+  const reader = body.getReader();
+  const chunks = [];
+  let totalBytes = 0;
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) {
+        break;
+      }
+      totalBytes += value.length;
+      if (totalBytes > maxBytes) {
+        throw new DownloadError({
+          url: url2,
+          message: `Download of ${url2} exceeded maximum size of ${maxBytes} bytes.`
+        });
+      }
+      chunks.push(value);
+    }
+  } finally {
+    try {
+      await reader.cancel();
+    } finally {
+      reader.releaseLock();
+    }
+  }
+  const result = new Uint8Array(totalBytes);
+  let offset = 0;
+  for (const chunk of chunks) {
+    result.set(chunk, offset);
+    offset += chunk.length;
+  }
+  return result;
+}
 var createIdGenerator = ({
   prefix,
   size = 16,
@@ -18382,18 +18473,6 @@ var createIdGenerator = ({
   return () => `${prefix}${separator}${generator()}`;
 };
 var generateId = createIdGenerator();
-function getErrorMessage2(error48) {
-  if (error48 == null) {
-    return "unknown error";
-  }
-  if (typeof error48 === "string") {
-    return error48;
-  }
-  if (error48 instanceof Error) {
-    return error48.message;
-  }
-  return JSON.stringify(error48);
-}
 function getRuntimeEnvironmentUserAgent(globalThisAny = globalThis) {
   var _a23, _b22, _c;
   if (globalThisAny.window) {
@@ -19650,15 +19729,26 @@ function isSchema(value) {
   return typeof value === "object" && value !== null && schemaSymbol in value && value[schemaSymbol] === true && "jsonSchema" in value && "validate" in value;
 }
 function asSchema(schema) {
-  return schema == null ? jsonSchema({ properties: {}, additionalProperties: false }) : isSchema(schema) ? schema : "~standard" in schema ? schema["~standard"].vendor === "zod" ? zodSchema(schema) : standardSchema(schema) : schema();
+  return schema == null ? jsonSchema({
+    type: "object",
+    properties: {},
+    additionalProperties: false
+  }) : isSchema(schema) ? schema : "~standard" in schema ? schema["~standard"].vendor === "zod" ? zodSchema(schema) : standardSchema(schema) : schema();
 }
 function standardSchema(standardSchema2) {
   return jsonSchema(
-    () => addAdditionalPropertiesToJsonSchema(
-      standardSchema2["~standard"].jsonSchema.input({
-        target: "draft-07"
-      })
-    ),
+    () => {
+      if (!hasStandardJsonSchema(standardSchema2)) {
+        throw new Error(
+          `Standard schema vendor '${standardSchema2["~standard"].vendor}' does not support JSON Schema conversion.`
+        );
+      }
+      return addAdditionalPropertiesToJsonSchema(
+        standardSchema2["~standard"].jsonSchema.input({
+          target: "draft-07"
+        })
+      );
+    },
     {
       validate: async (value) => {
         const result = await standardSchema2["~standard"].validate(value);
@@ -19673,6 +19763,9 @@ function standardSchema(standardSchema2) {
     }
   );
 }
+function hasStandardJsonSchema(schema) {
+  return schema["~standard"].jsonSchema != null;
+}
 function zod3Schema(zodSchema2, options) {
   var _a23;
   const useReferences = (_a23 = options == null ? void 0 : options.useReferences) != null ? _a23 : false;
@@ -19781,12 +19874,13 @@ async function resolve(value) {
   }
   return Promise.resolve(value);
 }
+var textDecoder = new TextDecoder();
 
-// ../../node_modules/.pnpm/ai@6.0.197_zod@4.3.6/node_modules/ai/dist/index.mjs
+// ../../node_modules/.pnpm/ai@6.0.230_zod@4.3.6/node_modules/ai/dist/index.mjs
 var __defProp2 = Object.defineProperty;
 var __export2 = (target, all) => {
-  for (var name21 in all)
-    __defProp2(target, name21, { get: all[name21], enumerable: true });
+  for (var name222 in all)
+    __defProp2(target, name222, { get: all[name222], enumerable: true });
 };
 var name15 = "AI_InvalidArgumentError";
 var marker16 = `vercel.ai.error.${name15}`;
@@ -19803,30 +19897,35 @@ var marker32 = `vercel.ai.error.${name32}`;
 var symbol32 = Symbol.for(marker32);
 var _a32;
 _a32 = symbol32;
-var name42 = "AI_InvalidToolInputError";
+var name42 = "AI_InvalidToolApprovalSignatureError";
 var marker42 = `vercel.ai.error.${name42}`;
 var symbol42 = Symbol.for(marker42);
 var _a42;
 _a42 = symbol42;
-var name52 = "AI_ToolCallNotFoundForApprovalError";
+var name52 = "AI_InvalidToolInputError";
 var marker52 = `vercel.ai.error.${name52}`;
 var symbol52 = Symbol.for(marker52);
 var _a52;
 _a52 = symbol52;
-var name62 = "AI_MissingToolResultsError";
+var name62 = "AI_ToolCallNotFoundForApprovalError";
 var marker62 = `vercel.ai.error.${name62}`;
 var symbol62 = Symbol.for(marker62);
 var _a62;
 _a62 = symbol62;
-var name72 = "AI_NoImageGeneratedError";
+var name72 = "AI_MissingToolResultsError";
 var marker72 = `vercel.ai.error.${name72}`;
 var symbol72 = Symbol.for(marker72);
 var _a72;
 _a72 = symbol72;
-var name82 = "AI_NoObjectGeneratedError";
+var name82 = "AI_NoImageGeneratedError";
 var marker82 = `vercel.ai.error.${name82}`;
 var symbol82 = Symbol.for(marker82);
 var _a82;
+_a82 = symbol82;
+var name92 = "AI_NoObjectGeneratedError";
+var marker92 = `vercel.ai.error.${name92}`;
+var symbol92 = Symbol.for(marker92);
+var _a92;
 var NoObjectGeneratedError = class extends AISDKError {
   constructor({
     message = "No object generated.",
@@ -19836,110 +19935,109 @@ var NoObjectGeneratedError = class extends AISDKError {
     usage,
     finishReason
   }) {
-    super({ name: name82, message, cause });
-    this[_a82] = true;
+    super({ name: name92, message, cause });
+    this[_a92] = true;
     this.text = text2;
     this.response = response;
     this.usage = usage;
     this.finishReason = finishReason;
   }
   static isInstance(error48) {
-    return AISDKError.hasMarker(error48, marker82);
+    return AISDKError.hasMarker(error48, marker92);
   }
 };
-_a82 = symbol82;
-var name92 = "AI_NoOutputGeneratedError";
-var marker92 = `vercel.ai.error.${name92}`;
-var symbol92 = Symbol.for(marker92);
-var _a92;
 _a92 = symbol92;
-var name102 = "AI_NoSpeechGeneratedError";
+var name102 = "AI_NoOutputGeneratedError";
 var marker102 = `vercel.ai.error.${name102}`;
 var symbol102 = Symbol.for(marker102);
 var _a102;
 _a102 = symbol102;
-var name112 = "AI_NoTranscriptGeneratedError";
+var name112 = "AI_NoSpeechGeneratedError";
 var marker112 = `vercel.ai.error.${name112}`;
 var symbol112 = Symbol.for(marker112);
 var _a112;
 _a112 = symbol112;
-var name122 = "AI_NoVideoGeneratedError";
+var name122 = "AI_NoTranscriptGeneratedError";
 var marker122 = `vercel.ai.error.${name122}`;
 var symbol122 = Symbol.for(marker122);
 var _a122;
 _a122 = symbol122;
-var name132 = "AI_NoSuchToolError";
+var name132 = "AI_NoVideoGeneratedError";
 var marker132 = `vercel.ai.error.${name132}`;
 var symbol132 = Symbol.for(marker132);
 var _a132;
 _a132 = symbol132;
-var name142 = "AI_ToolCallRepairError";
+var name142 = "AI_NoSuchToolError";
 var marker142 = `vercel.ai.error.${name142}`;
 var symbol142 = Symbol.for(marker142);
 var _a142;
 _a142 = symbol142;
-var name152 = "AI_UIMessageStreamError";
+var name152 = "AI_ToolCallRepairError";
 var marker152 = `vercel.ai.error.${name152}`;
 var symbol152 = Symbol.for(marker152);
 var _a152;
+_a152 = symbol152;
+var name16 = "AI_UIMessageStreamError";
+var marker162 = `vercel.ai.error.${name16}`;
+var symbol162 = Symbol.for(marker162);
+var _a162;
 var UIMessageStreamError = class extends AISDKError {
   constructor({
     chunkType,
     chunkId,
     message
   }) {
-    super({ name: name152, message });
-    this[_a152] = true;
+    super({ name: name16, message });
+    this[_a162] = true;
     this.chunkType = chunkType;
     this.chunkId = chunkId;
   }
   static isInstance(error48) {
-    return AISDKError.hasMarker(error48, marker152);
+    return AISDKError.hasMarker(error48, marker162);
   }
 };
-_a152 = symbol152;
-var name16 = "AI_InvalidDataContentError";
-var marker162 = `vercel.ai.error.${name16}`;
-var symbol162 = Symbol.for(marker162);
-var _a162;
 _a162 = symbol162;
-var name17 = "AI_InvalidMessageRoleError";
+var name17 = "AI_InvalidDataContentError";
 var marker17 = `vercel.ai.error.${name17}`;
 var symbol172 = Symbol.for(marker17);
 var _a172;
 _a172 = symbol172;
-var name18 = "AI_MessageConversionError";
+var name18 = "AI_InvalidMessageRoleError";
 var marker18 = `vercel.ai.error.${name18}`;
 var symbol18 = Symbol.for(marker18);
 var _a18;
 _a18 = symbol18;
-var name19 = "AI_RetryError";
+var name19 = "AI_MessageConversionError";
 var marker19 = `vercel.ai.error.${name19}`;
 var symbol19 = Symbol.for(marker19);
 var _a19;
 _a19 = symbol19;
-var VERSION = true ? "6.0.197" : "0.0.0-test";
+var name20 = "AI_RetryError";
+var marker20 = `vercel.ai.error.${name20}`;
+var symbol20 = Symbol.for(marker20);
+var _a20;
+_a20 = symbol20;
+var VERSION = true ? "6.0.230" : "0.0.0-test";
 var download = async ({
   url: url2,
   maxBytes,
   abortSignal
 }) => {
-  var _a21;
+  var _a222;
   const urlText = url2.toString();
-  validateDownloadUrl(urlText);
   try {
-    const response = await fetch(urlText, {
-      headers: withUserAgentSuffix(
-        {},
-        `ai-sdk/${VERSION}`,
-        getRuntimeEnvironmentUserAgent()
-      ),
-      signal: abortSignal
+    const headers = withUserAgentSuffix(
+      {},
+      `ai-sdk/${VERSION}`,
+      getRuntimeEnvironmentUserAgent()
+    );
+    const response = await fetchWithValidatedRedirects({
+      url: urlText,
+      headers,
+      abortSignal
     });
-    if (response.redirected) {
-      validateDownloadUrl(response.url);
-    }
     if (!response.ok) {
+      await cancelResponseBody(response);
       throw new DownloadError({
         url: urlText,
         statusCode: response.status,
@@ -19953,7 +20051,7 @@ var download = async ({
     });
     return {
       data,
-      mediaType: (_a21 = response.headers.get("content-type")) != null ? _a21 : void 0
+      mediaType: (_a222 = response.headers.get("content-type")) != null ? _a222 : void 0
     };
   } catch (error48) {
     if (DownloadError.isInstance(error48)) {
@@ -19969,8 +20067,8 @@ var dataContentSchema = external_exports.union([
   external_exports.custom(
     // Buffer might not be available in some environments such as CloudFlare:
     (value) => {
-      var _a21, _b16;
-      return (_b16 = (_a21 = globalThis.Buffer) == null ? void 0 : _a21.isBuffer(value)) != null ? _b16 : false;
+      var _a222, _b16;
+      return (_b16 = (_a222 = globalThis.Buffer) == null ? void 0 : _a222.isBuffer(value)) != null ? _b16 : false;
     },
     { message: "Must be a Buffer" }
   )
@@ -20199,6 +20297,7 @@ function mergeObjects(base, overrides) {
   }
   return result;
 }
+var encoder = new TextEncoder();
 var output_exports = {};
 __export2(output_exports, {
   array: () => array2,
@@ -20211,6 +20310,10 @@ function fixJson(input) {
   const stack = ["ROOT"];
   let lastValidIndex = -1;
   let literalStart = null;
+  let unicodeEscapeDigits = 0;
+  function isHexDigit(char) {
+    return char >= "0" && char <= "9" || char >= "A" && char <= "F" || char >= "a" && char <= "f";
+  }
   function processValueStart(char, i, swapState) {
     {
       switch (char) {
@@ -20415,7 +20518,22 @@ function fixJson(input) {
       }
       case "INSIDE_STRING_ESCAPE": {
         stack.pop();
-        lastValidIndex = i;
+        if (char === "u") {
+          unicodeEscapeDigits = 0;
+          stack.push("INSIDE_STRING_UNICODE_ESCAPE");
+        } else {
+          lastValidIndex = i;
+        }
+        break;
+      }
+      case "INSIDE_STRING_UNICODE_ESCAPE": {
+        if (isHexDigit(char)) {
+          unicodeEscapeDigits++;
+          if (unicodeEscapeDigits === 4) {
+            stack.pop();
+            lastValidIndex = i;
+          }
+        }
         break;
       }
       case "INSIDE_NUMBER": {
@@ -20552,7 +20670,7 @@ var text = () => ({
 });
 var object2 = ({
   schema: inputSchema,
-  name: name21,
+  name: name222,
   description
 }) => {
   const schema = asSchema(inputSchema);
@@ -20561,7 +20679,7 @@ var object2 = ({
     responseFormat: resolve(schema.jsonSchema).then((jsonSchema2) => ({
       type: "json",
       schema: jsonSchema2,
-      ...name21 != null && { name: name21 },
+      ...name222 != null && { name: name222 },
       ...description != null && { description }
     })),
     async parseCompleteOutput({ text: text2 }, context2) {
@@ -20615,7 +20733,7 @@ var object2 = ({
 };
 var array2 = ({
   element: inputElementSchema,
-  name: name21,
+  name: name222,
   description
 }) => {
   const elementSchema = asSchema(inputElementSchema);
@@ -20635,7 +20753,7 @@ var array2 = ({
           required: ["elements"],
           additionalProperties: false
         },
-        ...name21 != null && { name: name21 },
+        ...name222 != null && { name: name222 },
         ...description != null && { description }
       };
     }),
@@ -20665,6 +20783,7 @@ var array2 = ({
           finishReason: context2.finishReason
         });
       }
+      const validatedElements = [];
       for (const element of outerValue.elements) {
         const validationResult = await safeValidateTypes({
           value: element,
@@ -20680,8 +20799,9 @@ var array2 = ({
             finishReason: context2.finishReason
           });
         }
+        validatedElements.push(validationResult.value);
       }
-      return outerValue.elements;
+      return validatedElements;
     },
     async parsePartialOutput({ text: text2 }) {
       const result = await parsePartialJson(text2);
@@ -20727,7 +20847,7 @@ var array2 = ({
 };
 var choice = ({
   options: choiceOptions,
-  name: name21,
+  name: name222,
   description
 }) => {
   return {
@@ -20744,7 +20864,7 @@ var choice = ({
         required: ["result"],
         additionalProperties: false
       },
-      ...name21 != null && { name: name21 },
+      ...name222 != null && { name: name222 },
       ...description != null && { description }
     }),
     async parseCompleteOutput({ text: text2 }, context2) {
@@ -20805,14 +20925,14 @@ var choice = ({
   };
 };
 var json2 = ({
-  name: name21,
+  name: name222,
   description
 } = {}) => {
   return {
     name: "json",
     responseFormat: Promise.resolve({
       type: "json",
-      ...name21 != null && { name: name21 },
+      ...name222 != null && { name: name222 },
       ...description != null && { description }
     }),
     async parseCompleteOutput({ text: text2 }, context2) {
@@ -20969,7 +21089,8 @@ var uiMessageChunkSchema = lazySchema(
       external_exports.strictObject({
         type: external_exports.literal("tool-approval-request"),
         approvalId: external_exports.string(),
-        toolCallId: external_exports.string()
+        toolCallId: external_exports.string(),
+        signature: external_exports.string().optional()
       }),
       external_exports.strictObject({
         type: external_exports.literal("tool-output-available"),
@@ -21077,6 +21198,9 @@ var uiMessageChunkSchema = lazySchema(
 function isDataUIMessageChunk(chunk) {
   return chunk.type.startsWith("data-");
 }
+function createIdMap() {
+  return /* @__PURE__ */ Object.create(null);
+}
 function isStaticToolUIPart(part) {
   return part.type.startsWith("tool-");
 }
@@ -21100,9 +21224,9 @@ function createStreamingUIMessageState({
       role: "assistant",
       parts: []
     },
-    activeTextParts: {},
-    activeReasoningParts: {},
-    partialToolCalls: {}
+    activeTextParts: createIdMap(),
+    activeReasoningParts: createIdMap(),
+    partialToolCalls: createIdMap()
   };
 }
 function processUIMessageStream({
@@ -21118,7 +21242,7 @@ function processUIMessageStream({
     new TransformStream({
       async transform(chunk, controller) {
         await runUpdateMessageJob(async ({ state, write }) => {
-          var _a21, _b16, _c, _d;
+          var _a222, _b16, _c, _d;
           function getToolInvocation(toolCallId) {
             const toolInvocations = state.message.parts.filter(isToolUIPart);
             const toolInvocation = toolInvocations.find(
@@ -21134,7 +21258,7 @@ function processUIMessageStream({
             return toolInvocation;
           }
           function updateToolPart(options) {
-            var _a222;
+            var _a23;
             const part = state.message.parts.find(
               (part2) => isStaticToolUIPart(part2) && part2.toolCallId === options.toolCallId
             );
@@ -21153,7 +21277,7 @@ function processUIMessageStream({
               if (options.toolMetadata !== void 0) {
                 anyPart.toolMetadata = options.toolMetadata;
               }
-              anyPart.providerExecuted = (_a222 = anyOptions.providerExecuted) != null ? _a222 : part.providerExecuted;
+              anyPart.providerExecuted = (_a23 = anyOptions.providerExecuted) != null ? _a23 : part.providerExecuted;
               const providerMetadata = anyOptions.providerMetadata;
               if (providerMetadata != null) {
                 if (options.state === "output-available" || options.state === "output-error") {
@@ -21182,7 +21306,7 @@ function processUIMessageStream({
             }
           }
           function updateDynamicToolPart(options) {
-            var _a222, _b22;
+            var _a23, _b22;
             const part = state.message.parts.find(
               (part2) => part2.type === "dynamic-tool" && part2.toolCallId === options.toolCallId
             );
@@ -21194,7 +21318,7 @@ function processUIMessageStream({
               anyPart.input = anyOptions.input;
               anyPart.output = anyOptions.output;
               anyPart.errorText = anyOptions.errorText;
-              anyPart.rawInput = (_a222 = anyOptions.rawInput) != null ? _a222 : anyPart.rawInput;
+              anyPart.rawInput = (_a23 = anyOptions.rawInput) != null ? _a23 : anyPart.rawInput;
               anyPart.preliminary = anyOptions.preliminary;
               if (options.title !== void 0) {
                 anyPart.title = options.title;
@@ -21269,7 +21393,7 @@ function processUIMessageStream({
                 });
               }
               textPart.text += chunk.delta;
-              textPart.providerMetadata = (_a21 = chunk.providerMetadata) != null ? _a21 : textPart.providerMetadata;
+              textPart.providerMetadata = (_a222 = chunk.providerMetadata) != null ? _a222 : textPart.providerMetadata;
               write();
               break;
             }
@@ -21498,7 +21622,10 @@ function processUIMessageStream({
             case "tool-approval-request": {
               const toolInvocation = getToolInvocation(chunk.toolCallId);
               toolInvocation.state = "approval-requested";
-              toolInvocation.approval = { id: chunk.approvalId };
+              toolInvocation.approval = {
+                id: chunk.approvalId,
+                ...chunk.signature != null ? { signature: chunk.signature } : {}
+              };
               write();
               break;
             }
@@ -21576,8 +21703,8 @@ function processUIMessageStream({
               break;
             }
             case "finish-step": {
-              state.activeTextParts = {};
-              state.activeReasoningParts = {};
+              state.activeTextParts = createIdMap();
+              state.activeReasoningParts = createIdMap();
               break;
             }
             case "start": {
@@ -21759,7 +21886,8 @@ var originalGenerateId2 = createIdGenerator({
 });
 function createUIMessageStream({
   execute,
-  onError = getErrorMessage2,
+  onError = () => "An error occurred.",
+  // prevent leaking server error details to the client by default
   originalMessages,
   onStepFinish,
   onFinish,
@@ -21937,7 +22065,8 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.never().optional(),
-                reason: external_exports.never().optional()
+                reason: external_exports.never().optional(),
+                signature: external_exports.string().optional()
               })
             }),
             external_exports.object({
@@ -21954,7 +22083,8 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.boolean(),
-                reason: external_exports.string().optional()
+                reason: external_exports.string().optional(),
+                signature: external_exports.string().optional()
               })
             }),
             external_exports.object({
@@ -21973,7 +22103,8 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.literal(true),
-                reason: external_exports.string().optional()
+                reason: external_exports.string().optional(),
+                signature: external_exports.string().optional()
               }).optional()
             }),
             external_exports.object({
@@ -21992,7 +22123,8 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.literal(true),
-                reason: external_exports.string().optional()
+                reason: external_exports.string().optional(),
+                signature: external_exports.string().optional()
               }).optional()
             }),
             external_exports.object({
@@ -22009,7 +22141,8 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.literal(false),
-                reason: external_exports.string().optional()
+                reason: external_exports.string().optional(),
+                signature: external_exports.string().optional()
               })
             }),
             external_exports.object({
@@ -22049,7 +22182,8 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.never().optional(),
-                reason: external_exports.never().optional()
+                reason: external_exports.never().optional(),
+                signature: external_exports.string().optional()
               })
             }),
             external_exports.object({
@@ -22065,7 +22199,8 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.boolean(),
-                reason: external_exports.string().optional()
+                reason: external_exports.string().optional(),
+                signature: external_exports.string().optional()
               })
             }),
             external_exports.object({
@@ -22083,7 +22218,8 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.literal(true),
-                reason: external_exports.string().optional()
+                reason: external_exports.string().optional(),
+                signature: external_exports.string().optional()
               }).optional()
             }),
             external_exports.object({
@@ -22101,7 +22237,8 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.literal(true),
-                reason: external_exports.string().optional()
+                reason: external_exports.string().optional(),
+                signature: external_exports.string().optional()
               }).optional()
             }),
             external_exports.object({
@@ -22117,11 +22254,24 @@ var uiMessagesSchema = lazySchema(
               approval: external_exports.object({
                 id: external_exports.string(),
                 approved: external_exports.literal(false),
-                reason: external_exports.string().optional()
+                reason: external_exports.string().optional(),
+                signature: external_exports.string().optional()
               })
             })
           ])
-        ).nonempty("Message must contain at least one part")
+        )
+      }).superRefine((message, context2) => {
+        if (message.role !== "assistant" && message.parts.length === 0) {
+          context2.addIssue({
+            origin: "array",
+            code: "too_small",
+            minimum: 1,
+            inclusive: true,
+            input: message.parts,
+            path: ["parts"],
+            message: "Message must contain at least one part"
+          });
+        }
       })
     ).nonempty("Messages array must not be empty")
   )
@@ -22132,11 +22282,11 @@ function createDownload(options) {
 }
 var originalGenerateId4 = createIdGenerator({ prefix: "aiobj", size: 24 });
 var defaultDownload = createDownload();
-var name20 = "AI_NoSuchProviderError";
-var marker20 = `vercel.ai.error.${name20}`;
-var symbol20 = Symbol.for(marker20);
-var _a20;
-_a20 = symbol20;
+var name21 = "AI_NoSuchProviderError";
+var marker21 = `vercel.ai.error.${name21}`;
+var symbol21 = Symbol.for(marker21);
+var _a21;
+_a21 = symbol21;
 var defaultDownload2 = createDownload();
 
 // src/lib/cloud-api.ts
@@ -22158,6 +22308,62 @@ var prepareUserTools = (toolRegistry) => Object.keys(toolRegistry).reduce(
   {}
 );
 
+// src/lib/seal-provider-key.ts
+init_react_import();
+var DEFAULT_SEALING_KEY = {
+  kid: "puck-2026-07",
+  publicKey: "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"
+};
+var MAX_PLAINTEXT_BYTES = 446;
+var fromBase64 = (b64) => {
+  const binary = atob(b64);
+  const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+};
+var toBase64 = (bytes) => {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary);
+};
+var importCache = /* @__PURE__ */ new Map();
+var importPublicKey = (publicKey) => {
+  let imported = importCache.get(publicKey);
+  if (!imported) {
+    imported = crypto.subtle.importKey(
+      "spki",
+      fromBase64(publicKey),
+      { name: "RSA-OAEP", hash: "SHA-256" },
+      false,
+      ["encrypt"]
+    );
+    importCache.set(publicKey, imported);
+  }
+  return imported;
+};
+var activeSealingKey = DEFAULT_SEALING_KEY;
+var sealProviderKey = async (providerApiKey, puckApiKey) => {
+  const sealingKey = activeSealingKey;
+  if (typeof crypto === "undefined" || !crypto.subtle) {
+    throw new Error(
+      "BYOK requires the WebCrypto API (Node 18+ or an edge runtime) to encrypt the provider key"
+    );
+  }
+  const encoder2 = new TextEncoder();
+  const plaintext = encoder2.encode(providerApiKey);
+  if (plaintext.length > MAX_PLAINTEXT_BYTES) {
+    throw new Error(
+      `Provider API key is too long to seal (${plaintext.length} bytes, max ${MAX_PLAINTEXT_BYTES})`
+    );
+  }
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "RSA-OAEP", label: encoder2.encode(puckApiKey) },
+    await importPublicKey(sealingKey.publicKey),
+    plaintext
+  );
+  return `v1.${sealingKey.kid}.${toBase64(new Uint8Array(ciphertext))}`;
+};
+
 // src/lib/get-api-key.ts
 init_react_import();
 var getApiKey = () => process.env.PUCK_API_KEY;
@@ -22178,16 +22384,16 @@ var processUserTool = async ({
   }
   const responses = [];
   for (let i = 0; i < requestTools.length; i++) {
-    const { name: name21, input } = requestTools[i];
-    const tool2 = tools?.[name21];
+    const { name: name23, input } = requestTools[i];
+    const tool2 = tools?.[name23];
     if (!tool2) {
-      throw new Error(`An unknown tool was called: ${name21}`);
+      throw new Error(`An unknown tool was called: ${name23}`);
     }
     if (!input) {
       throw new Error(`Input was not present in tool call: ${toolCallId}`);
     }
     const output = await tool2.execute(input);
-    responses.push({ name: name21, input, output });
+    responses.push({ name: name23, input, output });
   }
   const res = await fetch(`${host}/tool`, {
     headers: { "x-api-key": apiKey },
@@ -22226,9 +22432,35 @@ async function* iterateSSE(body) {
   }
 }
 
+// src/lib/fetch-with-retry.ts
+init_react_import();
+var MAX_RETRIES = 2;
+var MAX_RETRY_AFTER_SECONDS = 10;
+var sleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
+async function fetchWithRetry(input, init) {
+  for (let attempt = 0; ; attempt++) {
+    const res = await fetch(input, init);
+    if (res.ok || res.status !== 429 || attempt >= MAX_RETRIES) {
+      return res;
+    }
+    const retryAfter = Number(res.headers.get("Retry-After"));
+    if (!Number.isFinite(retryAfter) || retryAfter <= 0 || retryAfter > MAX_RETRY_AFTER_SECONDS) {
+      return res;
+    }
+    await res.body?.cancel().catch(() => {
+    });
+    await sleep(retryAfter * 1e3);
+  }
+}
+
 // src/lib/cloud-api.ts
 var DEFAULT_API_VERSION = "v2";
-var cloudApi = async (path, body, options = {}, onChunk) => {
+var DEFAULT_V2_MODELS = {
+  assembly: "openai/gpt-5.4-mini",
+  design: "openai/gpt-5.6-luna"
+};
+var CLOUD_CLIENT_VERSION = true ? "0.8.0" : "unknown";
+var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
   const {
     ai = {},
     apiKey = getApiKey(),
@@ -22240,14 +22472,31 @@ var cloudApi = async (path, body, options = {}, onChunk) => {
       "No Puck API key specified. Set the PUCK_API_KEY environment variable, or provide one to the function"
     );
   }
-  const { context, tools = {} } = ai;
-  const res = await fetch(`${host}/${path}`, {
-    headers: { "x-api-key": apiKey, "puck-api-version": apiVersion },
+  const { context, tools = {}, designMode, providerOptions } = ai;
+  const bodyMode = "mode" in body ? body.mode : void 0;
+  const mode = bodyMode === "design" || bodyMode === void 0 && ai.mode === "design" ? "design" : "assembly";
+  const model = ai.model ?? (apiVersion === DEFAULT_API_VERSION ? DEFAULT_V2_MODELS[mode] : void 0);
+  const providerApiKey = ai.model || designMode?.model ? ai.providerApiKey ?? process.env.OPENAI_API_KEY : void 0;
+  const sealedProviderKey = providerApiKey ? await sealProviderKey(providerApiKey, apiKey) : void 0;
+  const res = await fetchWithRetry(`${host}/${path}`, {
+    headers: {
+      "x-api-key": apiKey,
+      "puck-api-version": apiVersion,
+      "x-puck-cloud-client-version": CLOUD_CLIENT_VERSION,
+      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {},
+      ...sealedProviderKey ? { "x-puck-provider-key": sealedProviderKey } : {}
+    },
     method: "post",
     body: JSON.stringify({
       ...body,
       context,
-      tools: prepareUserTools(tools)
+      tools: prepareUserTools(tools),
+      ...designMode ? {
+        designMode
+      } : {},
+      // "byok" is the historical wire slot for the model request; the
+      // platform bills it Puck-hosted when no key header accompanies it.
+      ...model || providerOptions ? { byok: { model, providerOptions } } : {}
     })
   });
   if (!res.body) {
@@ -22262,6 +22511,9 @@ var cloudApi = async (path, body, options = {}, onChunk) => {
     if (chunk.type === "data-user-tool") {
       await processUserTool({ data: chunk.data, tools, options });
     } else {
+      if (chunk.type === "data-version-notice") {
+        console.warn(chunk.data.message);
+      }
       onChunk(chunk);
     }
   }
@@ -22269,12 +22521,18 @@ var cloudApi = async (path, body, options = {}, onChunk) => {
 };
 
 // src/api/chat.ts
-function chat({ chatId, messages, config: config2, pageData }, options = {}) {
+var handleStreamError = (error48) => {
+  console.error(error48);
+  return error48 instanceof Error ? error48.message : "An error occurred.";
+};
+function chatPrivate({ chatId, messages, config: config2, pageData, mode }, options = {}, forwardHeaders) {
+  const resolvedMode = mode ?? options?.ai?.mode;
   const stream = createUIMessageStream({
+    onError: handleStreamError,
     execute: async ({ writer }) => {
       await cloudApi(
         "chat",
-        { chatId, config: config2, messages, pageData },
+        { chatId, config: config2, messages, pageData, mode: resolvedMode },
         options,
         (chunk) => {
           if (chunk.type === "data-finish") {
@@ -22282,7 +22540,30 @@ function chat({ chatId, messages, config: config2, pageData }, options = {}) {
           } else {
             writer.write(chunk);
           }
-        }
+        },
+        forwardHeaders
+      );
+    }
+  });
+  return createUIMessageStreamResponse({ stream });
+}
+function chat({ chatId, messages, config: config2, pageData }, options = {}, forwardHeaders) {
+  const resolvedMode = options?.ai?.mode;
+  const stream = createUIMessageStream({
+    onError: handleStreamError,
+    execute: async ({ writer }) => {
+      await cloudApi(
+        "chat",
+        { chatId, config: config2, messages, pageData, mode: resolvedMode },
+        options,
+        (chunk) => {
+          if (chunk.type === "data-finish") {
+            options.ai?.onFinish?.(chunk.data);
+          } else {
+            writer.write(chunk);
+          }
+        },
+        forwardHeaders
       );
     }
   });
@@ -22297,21 +22578,40 @@ async function generate({
   pageData,
   context,
   tools,
+  mode,
+  designMode,
   apiKey,
   host,
-  onFinish
+  onFinish,
+  model,
+  providerApiKey,
+  providerOptions
 }) {
   let result = null;
-  const options = { ai: { context, tools }, apiKey, host };
-  await cloudApi("generate", { prompt, config: config2, pageData }, options, (chunk) => {
-    if (chunk.type === "data-page") {
-      result = chunk.data;
-    } else if (chunk.type === "data-finish") {
-      onFinish?.(chunk.data);
-    } else if (chunk.type === "error") {
-      throw new Error(chunk.errorText);
-    }
-  });
+  const options = {
+    ai: { context, tools, designMode, model, providerApiKey, providerOptions },
+    apiKey,
+    host
+  };
+  try {
+    await cloudApi(
+      "generate",
+      { prompt, config: config2, pageData, mode },
+      options,
+      (chunk) => {
+        if (chunk.type === "data-page") {
+          result = chunk.data;
+        } else if (chunk.type === "data-finish") {
+          onFinish?.(chunk.data);
+        } else if (chunk.type === "error") {
+          throw new Error(chunk.errorText);
+        }
+      }
+    );
+  } catch (error48) {
+    console.error(error48);
+    throw error48;
+  }
   return result;
 }
 
@@ -22480,7 +22780,9 @@ var routeRegistry = [
   {
     pattern: "/api/puck/chat",
     methods: {
-      POST: ({ body }, options) => chat(body, options)
+      POST: ({ body, headers }, options) => chatPrivate(body, options, {
+        pluginAiVersion: headers.get("x-puck-plugin-ai-version")
+      })
     }
   }
 ];