@shop-os/modelkit 0.2.25 → 0.2.27

package/CHANGELOG.md

@@ -9,6 +9,19 @@ header in the release PR.
 
 ## [Unreleased]
 
+## [0.2.27] - Unreleased
+
+### Fixed
+- A `sloosh` call never goes through the Cloudflare AI Gateway. With `routing.fal: "cloudflare-passthrough"` or `routing.text: "cloudflare"` the gateway's BYOK secrets are the pro provider keys, so a sloosh call through it spent the pro account and, because the tier had no gateway token, failed first with `auth` ("Missing Sloosh API key for cloudflare"). The kit now resolves the routing per tier: sloosh calls the provider directly with `keys.sloosh` (`fal`, or the vendor key); pro and enterprise keep the gateway (ENG-2990).
+
+## [0.2.26] - Unreleased
+
+### Added
+- `providerOptions.modelkit.inputSpec` now works on Replicate image rows, so a new Replicate image model is a database row with no kit change. Image rows use `IMAGE_INPUT_SPEC_KEYS`: `prompt`, `references` (an array, mapped to the provider's field such as `images`), `aspectRatio`, `size`, `outputFormat`, `seed`. Use `values` to remap `size` (`1K` to `1k`) and `outputFormat` (`jpeg` to `jpg`) and `static` for literal fields. `outputFormat` and `seed` fields need the matching `constraints.supports` entry. `aspectRatio: "adaptive"` is omitted. A Replicate image row with a hard-coded kind (topaz, upscaler, wan, qwen) ignores `inputSpec`; a row with no `inputSpec` keeps the old generic `prompt` + `image` request. `upscale` and `bg-remove` rows still reject `inputSpec`.
+
+### Live rows to add after publish
+Add a Replicate image row that carries an `inputSpec` (for example `black-forest-labs/flux-3-image`) to pro-backend's `model_catalog` only after every app that will call it runs 0.2.26. An older kit accepts the row but ignores the `inputSpec`, so it sends only `prompt` and a single `image` and drops the references, ratio and size.
+
 ## [0.2.25] - Unreleased
 
 ### Added

package/README.md

@@ -194,12 +194,15 @@ The Bedrock model id is `<routing.bedrockProfile>.anthropic.<providerModelId>`
 breaks the pattern sets `providerOptions.modelkit.bedrockModelId` on its row.
 See the CHANGELOG entry for the caller-visible Bedrock limits.
 
-A Replicate video or audio row for a new model carries `providerOptions.modelkit.inputSpec`
+A Replicate video, image or audio row for a new model carries `providerOptions.modelkit.inputSpec`
 instead of a kit change. It is read by the Replicate adapter only. `fields` maps a canonical key to the provider field name,
 `values` remaps canonical values per key, and `static` merges literal provider fields
 last. Video rows use `VIDEO_INPUT_SPEC_KEYS` (`prompt`, `durationSeconds`,
 `aspectRatio`, `resolution`, `firstFrame`, `lastFrame`, `seed`, `negativePrompt`,
-`generateAudio`, `cfgScale`, `promptExpansion`, `referenceImages`); audio rows use
+`generateAudio`, `cfgScale`, `promptExpansion`, `referenceImages`); image rows use
+`IMAGE_INPUT_SPEC_KEYS` (`prompt`, `references`, `aspectRatio`, `size`, `outputFormat`,
+`seed`; map `references` to the provider's array field and remap `size` and `outputFormat`
+with `values`); audio rows use
 `AUDIO_INPUT_SPEC_KEYS` (`prompt`, `durationSeconds`, `seed`, `negativePrompt`,
 `references`, `sourceVideo`, `instrumental`). `aspectRatio: "adaptive"` is omitted.
 `validateInputSpec` is the shared contract the write schema, `dataOnlyCapable`, and

package/dist/catalog.cjs

@@ -2154,6 +2154,14 @@ var VIDEO_INPUT_SPEC_KEYS = [
   "promptExpansion",
   "referenceImages"
 ];
+var IMAGE_INPUT_SPEC_KEYS = [
+  "prompt",
+  "references",
+  "aspectRatio",
+  "size",
+  "outputFormat",
+  "seed"
+];
 var AUDIO_INPUT_SPEC_KEYS = [
   "prompt",
   "durationSeconds",
@@ -2170,14 +2178,22 @@ var INPUT_SPEC_SUPPORTS_KEYS = [
   "generateAudio",
   "cfgScale",
   "promptExpansion",
+  "outputFormat",
   "instrumental"
 ];
 var VIDEO_KEY_SET = new Set(VIDEO_INPUT_SPEC_KEYS);
+var IMAGE_KEY_SET = new Set(IMAGE_INPUT_SPEC_KEYS);
 var AUDIO_KEY_SET = new Set(AUDIO_INPUT_SPEC_KEYS);
 var ALL_KEY_SET = /* @__PURE__ */ new Set([
   ...VIDEO_INPUT_SPEC_KEYS,
+  ...IMAGE_INPUT_SPEC_KEYS,
   ...AUDIO_INPUT_SPEC_KEYS
 ]);
+var ALLOWED_KEYS_BY_TYPE = /* @__PURE__ */ new Map([
+  ["video", VIDEO_KEY_SET],
+  ["image", IMAGE_KEY_SET],
+  ["audio", AUDIO_KEY_SET]
+]);
 var ProviderScalarSchema = import_zod2.z.union([import_zod2.z.string(), import_zod2.z.number(), import_zod2.z.boolean()]);
 var FieldsSchema = import_zod2.z.record(import_zod2.z.string(), import_zod2.z.string().min(1)).superRefine((fields, ctx) => {
   const keys = Object.keys(fields);
@@ -2243,13 +2259,13 @@ function validateInputSpec(raw, row) {
     };
   }
   const issues = [];
-  if (row.type !== "video" && row.type !== "audio") {
+  const allowed = ALLOWED_KEYS_BY_TYPE.get(row.type);
+  if (allowed === void 0) {
     issues.push({
       path: [],
       message: `inputSpec is not supported for "${row.type}" rows`
     });
   } else {
-    const allowed = row.type === "video" ? VIDEO_KEY_SET : AUDIO_KEY_SET;
     for (const key of Object.keys(spec.fields)) {
       if (!allowed.has(key)) {
         issues.push({