agents 0.27.0 → 0.28.1

package/dist/abortable-C1SpfVoi.js

@@ -0,0 +1,21 @@
+//#region src/web/abortable.ts
+/**
+* Shared by the `web_search` and `web_fetch` tools. Internal — not an entry
+* point.
+*/
+/** Settle with `promise`, or reject with the signal's reason once it aborts. */
+function abortable(promise, signal) {
+	if (!signal) return promise;
+	signal.throwIfAborted();
+	return new Promise((resolve, reject) => {
+		const onAbort = () => reject(signal.reason);
+		signal.addEventListener("abort", onAbort, { once: true });
+		promise.then(resolve, reject).finally(() => {
+			signal.removeEventListener("abort", onAbort);
+		});
+	});
+}
+//#endregion
+export { abortable as t };
+
+//# sourceMappingURL=abortable-C1SpfVoi.js.map

package/dist/abortable-C1SpfVoi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abortable-C1SpfVoi.js","names":[],"sources":["../src/web/abortable.ts"],"sourcesContent":["/**\n * Shared by the `web_search` and `web_fetch` tools. Internal — not an entry\n * point.\n */\n\n/** Settle with `promise`, or reject with the signal's reason once it aborts. */\nexport function abortable<T>(\n  promise: Promise<T>,\n  signal?: AbortSignal\n): Promise<T> {\n  if (!signal) return promise;\n  signal.throwIfAborted();\n  return new Promise<T>((resolve, reject) => {\n    const onAbort = () => reject(signal.reason);\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n    promise.then(resolve, reject).finally(() => {\n      signal.removeEventListener(\"abort\", onAbort);\n    });\n  });\n}\n"],"mappings":";;;;;;AAMA,SAAgB,UACd,SACA,QACY;CACZ,IAAI,CAAC,QAAQ,OAAO;CACpB,OAAO,eAAe;CACtB,OAAO,IAAI,SAAY,SAAS,WAAW;EACzC,MAAM,gBAAgB,OAAO,OAAO,MAAM;EAC1C,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;EACxD,QAAQ,KAAK,SAAS,MAAM,CAAC,CAAC,cAAc;GAC1C,OAAO,oBAAoB,SAAS,OAAO;EAC7C,CAAC;CACH,CAAC;AACH"}

package/dist/{agent-routing-Bhdbvf7s.d.ts → agent-routing-BMvWTFEp.d.ts}

@@ -8,13 +8,13 @@ import {
   u as LifecycleRouteAddress,
   v as LifecycleJobOutcome,
   x as Connection
-} from "./capability-runner-O5VbQzqg.js";
+} from "./capability-runner-BiVUtjqC.js";
 import { t as RetryOptions } from "./retries-CV6AkXmQ.js";
 import {
   r as LifecycleRouteEnvelope,
   t as Lifecycle
-} from "./durable-object-lifecycle-DRqp475_.js";
-import { n as CurrentAgentContext } from "./current-agent-C07C5o5Y.js";
+} from "./durable-object-lifecycle-DOI_bzCH.js";
+import { n as CurrentAgentContext } from "./current-agent-CKgT5d1O.js";
 import { t as AgentEmail } from "./internal_context-BlxFEWfn.js";
 import { r as EmailResolver, s as SendEmailOptions } from "./email-7TatiTnl.js";
 import {
@@ -41,10 +41,10 @@ import {
   i as Schedule,
   o as ScheduleOptions,
   t as Scheduler
-} from "./scheduler-CrFCnv_J.js";
+} from "./scheduler-BCLESHSC.js";
 import { i as QueueItem } from "./types-BA4anrjI.js";
-import { l as TaskHandlers, r as Tasks } from "./tasks-PtlB4Uyn.js";
-import { t as State } from "./index-D0A5tbWu.js";
+import { l as TaskHandlers, r as Tasks } from "./tasks-E89KdwkS.js";
+import { t as State } from "./index-BEL3ZV-s.js";
 import { t as CallableMetadata } from "./callable-decorator-DP__HhBA.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import {
@@ -1320,6 +1320,17 @@ declare abstract class McpAgent<
   abstract init(): Promise<void>;
   setInitializeRequest(initializeRequest: JSONRPCMessage$1): Promise<void>;
   getInitializeRequest(): Promise<JSONRPCMessage$1 | undefined>;
+  /**
+   * End a streamable HTTP session (`DELETE`). Teardown is deferred to the
+   * agent's alarm (#1625), so the stored initialize request is cleared too:
+   * every route treats a session without one as unknown, which makes requests
+   * carrying the terminated session ID get 404 as the spec requires. Teardown
+   * is scheduled first, so a failure part-way leaves a session the client can
+   * `DELETE` again rather than one that is never cleaned up.
+   *
+   * @internal
+   */
+  _cf_terminateSession(): Promise<void>;
   /**
    * Storage key prefix for the `streamId -> requestIds` mapping used
    * to support POST stream resumption across WebSocket reconnects.
@@ -2763,8 +2774,7 @@ type MCPServerFilter = {
 };
 /**
  * A Durable Object capability that persists and aggregates MCP client
- * connections. Installing it directly on a Lifecycle (outside `agent.mcp`)
- * is experimental: that capability surface may change before stabilizing.
+ * connections. Install it on any Lifecycle, or use `agent.mcp` on an Agent.
  */
 declare class MCPClientManager extends LifecycleCapability {
   private readonly _name;
@@ -4521,8 +4531,6 @@ declare class Agent<
 > extends DurableObject<Env> {
   /**
    * Runtime lifecycle and reusable durable capabilities for this Agent.
-   *
-   * @experimental The API surface may change before stabilizing.
    */
   readonly lifecycle: Lifecycle<Env, Props>;
   /**
@@ -4664,10 +4672,8 @@ declare class Agent<
   private _ParentClass;
   /**
    * Durable scheduling capability installed into this Agent's Lifecycle.
-   *
-   * @experimental The API surface may change before stabilizing. Agent's
-   * schedule()/scheduleEvery()/getScheduleById()/listSchedules()/
-   * cancelSchedule() methods are the stable surface.
+   * Agent's schedule()/scheduleEvery()/getScheduleById()/listSchedules()/
+   * cancelSchedule() methods delegate to it.
    */
   readonly scheduler: Scheduler;
   /**
@@ -7040,4 +7046,4 @@ export {
   AgentToolEventState as z,
   MCPClientOAuthResult as zt
 };
-//# sourceMappingURL=agent-routing-Bhdbvf7s.d.ts.map
+//# sourceMappingURL=agent-routing-BMvWTFEp.d.ts.map

package/dist/agent-routing.d.ts

@@ -4,7 +4,7 @@ import {
   n as AgentOptions,
   r as RoutingRetryOptions,
   t as AgentGetOptions
-} from "./agent-routing-Bhdbvf7s.js";
+} from "./agent-routing-BMvWTFEp.js";
 export {
   AgentGetOptions,
   AgentOptions,

package/dist/agent-tool-types.d.ts

@@ -27,7 +27,7 @@ import {
   rt as RunAgentToolResult,
   tt as DetachedRunAgentToolResult,
   z as AgentToolEventState
-} from "./agent-routing-Bhdbvf7s.js";
+} from "./agent-routing-BMvWTFEp.js";
 export {
   AGENT_TOOL_MILESTONE_PART,
   AGENT_TOOL_PROGRESS_PART,

package/dist/{agent-tools-bJZwBMfq.d.ts → agent-tools-ohoewW-B.d.ts}

@@ -4,7 +4,7 @@ import {
   W as AgentToolProgress,
   Z as AgentToolStoredChunk,
   z as AgentToolEventState
-} from "./agent-routing-Bhdbvf7s.js";
+} from "./agent-routing-BMvWTFEp.js";
 
 //#region src/chat/agent-tools.d.ts
 type AgentToolProgressEmitResult = "emitted" | "coalesced" | "inactive";
@@ -144,4 +144,4 @@ export {
   interceptAgentToolBroadcast as s,
   AgentToolBroadcastHooks as t
 };
-//# sourceMappingURL=agent-tools-bJZwBMfq.d.ts.map
+//# sourceMappingURL=agent-tools-ohoewW-B.d.ts.map

package/dist/agent-tools.d.ts

@@ -20,7 +20,7 @@ import {
   rt as RunAgentToolResult,
   tt as DetachedRunAgentToolResult,
   z as AgentToolEventState
-} from "./agent-routing-Bhdbvf7s.js";
+} from "./agent-routing-BMvWTFEp.js";
 import { FlexibleSchema, InferSchema, Tool } from "ai";
 
 //#region src/agent-tools.d.ts

package/dist/ai-ahruGw7e.d.ts

@@ -0,0 +1,239 @@
+import {
+  d as BrowserBinding,
+  n as BrowserSessionStore
+} from "./session-store-DoPY12xM.js";
+import {
+  l as QuickActionBinding,
+  r as BrowserConnectorSessionOptions,
+  t as BrowserConnector,
+  u as QuickActionCommonOptions
+} from "./connector-DEXzVoaY.js";
+import { ToolSet } from "ai";
+import { CodemodeRuntimeHandle } from "@cloudflare/codemode";
+
+//#region src/browser/ai.d.ts
+interface CreateBrowserToolsOptions {
+  /**
+   * Durable Object state. The codemode runtime that backs the browser tool
+   * lives in a facet of this DO, and browser session ids are stored in its
+   * storage — so the tool must be created from inside a Durable Object
+   * (e.g. an Agent).
+   *
+   * Optional: when omitted, it is resolved from the current Agent via
+   * `getCurrentAgent()`, so inside an Agent method you can just pass `browser`
+   * and `loader`. Pass it explicitly outside an Agent context.
+   *
+   * The worker must export the `CodemodeRuntime` class (the
+   * `@cloudflare/codemode/vite` plugin does this automatically, or add
+   * `export { CodemodeRuntime } from "@cloudflare/codemode"` to your entry).
+   */
+  ctx?: DurableObjectState;
+  /**
+   * WorkerLoader binding for sandboxed code execution.
+   *
+   * Requires `"worker_loaders": [{ "binding": "LOADER" }]` in wrangler.jsonc.
+   */
+  loader: WorkerLoader;
+  /**
+   * Browser Rendering binding (Fetcher).
+   *
+   * This is the primary way to connect — works both locally in
+   * `wrangler dev` and when deployed to Cloudflare Workers.
+   *
+   * Requires `"browser": { "binding": "BROWSER" }` in wrangler.jsonc.
+   */
+  browser?: BrowserBinding;
+  /**
+   * Optional CDP base URL override (e.g. `http://localhost:9222`).
+   *
+   * Use when connecting to a manually managed Chrome instance or
+   * a remote CDP endpoint behind a tunnel.
+   */
+  cdpUrl?: string;
+  /**
+   * Headers to send with CDP URL discovery requests.
+   * Useful when the CDP endpoint requires authentication
+   * (e.g. Cloudflare Access headers).
+   */
+  cdpHeaders?: Record<string, string>;
+  /**
+   * Browser session lifecycle (binding-backed only). Defaults to one fresh
+   * session per codemode execution (`one-shot`).
+   */
+  session?: BrowserConnectorSessionOptions;
+  /**
+   * Durable store for Browser Run session ids. Defaults to a
+   * {@link DurableBrowserSessionStore} over `ctx.storage`.
+   */
+  store?: BrowserSessionStore;
+  /**
+   * Sandbox execution timeout in milliseconds. Defaults to 30000 (30s).
+   * Also used as the per-CDP-command timeout.
+   */
+  timeout?: number;
+  /**
+   * Codemode runtime name — the durable identity of the tool's executions
+   * and snippets. Defaults to `"browser"`.
+   */
+  name?: string;
+  /**
+   * Also expose stateless {@link createQuickActionTools | Quick Action} tools
+   * (`browser_markdown`, `browser_extract`, …) alongside the durable
+   * `browser_execute` tool.
+   *
+   * Enabled by default whenever a Browser Run `browser` binding is available
+   * (they share it), except when `session.browser` selects Kitesurf because
+   * the binding RPC cannot select that engine. Pass `true` or an object to
+   * explicitly add Chromium Quick Actions alongside Kitesurf, or `false` to
+   * disable them. The Quick Action binding defaults to `browser`; override it via
+   * `quickActions.browser`. When only `cdpUrl` is set (no binding), the
+   * defaults are skipped silently — pass `quickActions: { browser }` to force
+   * them.
+   */
+  quickActions?:
+    | boolean
+    | {
+        browser?: QuickActionBinding;
+        actions?: QuickActionToolName[];
+        maxChars?: number;
+        options?: QuickActionCommonOptions;
+      };
+}
+/**
+ * The browser tool's moving parts, for hosts that need more than the tools:
+ *
+ * - `runtime` — the codemode runtime handle (approve/reject paused runs,
+ *   `expirePaused`, audit via `executions()`, snippets).
+ * - `connector` — host-side session helpers: `sessionInfo()`,
+ *   `closeSession()`, and `sweep()` for a recurring cleanup task.
+ * - `tools` — what `createBrowserTools` returns.
+ */
+interface BrowserRuntime {
+  runtime: CodemodeRuntimeHandle;
+  connector: BrowserConnector;
+  tools: ToolSet;
+}
+/**
+ * Create the browser codemode runtime: the `browser_execute` tool plus the
+ * runtime handle and connector for host-side wiring (approvals, session info,
+ * sweeps).
+ *
+ * @example
+ * ```ts
+ * export class MyAgent extends Agent<Env> {
+ *   get browser() {
+ *     return createBrowserRuntime({
+ *       ctx: this.ctx,
+ *       browser: this.env.BROWSER,
+ *       loader: this.env.LOADER,
+ *       session: { mode: "dynamic" }
+ *     });
+ *   }
+ *
+ *   @callable()
+ *   async closeBrowserSession() {
+ *     await this.browser.connector.closeSession();
+ *   }
+ * }
+ * ```
+ */
+declare function createBrowserRuntime(
+  options: CreateBrowserToolsOptions
+): BrowserRuntime;
+/**
+ * Create AI SDK tools for browser automation via CDP code mode.
+ *
+ * Returns a `ToolSet` with a single durable `browser_execute` tool backed by
+ * a codemode runtime: the model writes TypeScript against the `cdp` connector
+ * (`cdp.send`, `cdp.attachToTarget`, `cdp.spec`, …), executions are recorded
+ * for abort-and-replay, and browser sessions survive pauses.
+ *
+ * @example
+ * ```ts
+ * import { createBrowserTools } from "agents/browser/ai";
+ * import { generateText } from "ai";
+ *
+ * // inside a Durable Object / Agent:
+ * const browserTools = createBrowserTools({
+ *   ctx: this.ctx,
+ *   browser: this.env.BROWSER,
+ *   loader: this.env.LOADER,
+ * });
+ *
+ * const result = await generateText({
+ *   model,
+ *   tools: { ...browserTools, ...otherTools },
+ *   messages,
+ * });
+ * ```
+ */
+declare function createBrowserTools(
+  options: CreateBrowserToolsOptions
+): ToolSet;
+/** A Quick Action exposed as an AI SDK tool. */
+type QuickActionToolName =
+  | "markdown"
+  | "extract"
+  | "links"
+  | "scrape"
+  | "content";
+interface CreateQuickActionToolsOptions {
+  /**
+   * Browser Run binding with Quick Actions support (`env.BROWSER`). Requires a
+   * Worker `compatibility_date` of `2026-03-24`+ and `remote: true` for local
+   * `wrangler dev`.
+   */
+  browser: QuickActionBinding;
+  /**
+   * Which tools to expose. Defaults to the text-returning, model-friendly set
+   * (`markdown`, `extract`, `links`, `scrape`). `content` (raw HTML) is opt-in
+   * since it is large and rarely what a model wants.
+   */
+  actions?: QuickActionToolName[];
+  /**
+   * Bound every result to roughly this many characters before returning it to
+   * the model, to protect the context window, preserving each result's shape:
+   * text (markdown/content) is truncated to a string, oversized arrays
+   * (links/scrape) are trimmed but stay arrays, and only an opaque oversized
+   * object degrades to a truncated-preview summary. Set to `0` to disable.
+   * Defaults to 50000.
+   */
+  maxChars?: number;
+  /**
+   * Common Browser Run options merged into every request — e.g. `cookies`,
+   * `authenticate`, or `setExtraHTTPHeaders` for authenticated pages, and
+   * `gotoOptions` / `viewport` for JavaScript-heavy pages. The model only ever
+   * supplies the page (`url`/`html`) and action-specific fields; these
+   * host-supplied options are never exposed to it.
+   */
+  options?: QuickActionCommonOptions;
+}
+/**
+ * Create AI SDK tools for Browser Run [Quick Actions](https://developers.cloudflare.com/browser-run/quick-actions/):
+ * stateless one-shot browsing (read a page as Markdown, extract structured
+ * data with AI, list links, scrape elements). Unlike `createBrowserTools`,
+ * these need only the `browser` binding — no Durable Object, loader, or
+ * sandbox — so they work from any Worker.
+ *
+ * @example
+ * ```ts
+ * import { createQuickActionTools } from "agents/browser/ai";
+ *
+ * const tools = createQuickActionTools({ browser: this.env.BROWSER });
+ * const result = await generateText({ model, tools, messages });
+ * ```
+ */
+declare function createQuickActionTools(
+  options: CreateQuickActionToolsOptions
+): ToolSet;
+//#endregion
+export {
+  createBrowserRuntime as a,
+  QuickActionToolName as i,
+  CreateBrowserToolsOptions as n,
+  createBrowserTools as o,
+  CreateQuickActionToolsOptions as r,
+  createQuickActionTools as s,
+  BrowserRuntime as t
+};
+//# sourceMappingURL=ai-ahruGw7e.d.ts.map

package/dist/{ai-sdk-OoGkFy3s.js → ai-sdk-C2iTAwUd.js}

@@ -1,7 +1,7 @@
 import { i as _classPrivateFieldInitSpec, n as _classPrivateFieldSet2, r as _assertClassBrand, t as _classPrivateFieldGet2 } from "./classPrivateFieldGet2-DZBYAB34.js";
 import { t as _classPrivateMethodInitSpec } from "./classPrivateMethodInitSpec-qMjJ6sHQ.js";
-import { a as parseModelOptions, i as mergeModelOptions, n as PROVIDER_OPTIONS_KEY, o as resolveOptions, r as gatewayLayerOf } from "./settings-C45hDliX.js";
-import { S as isRetryableStatus, _ as isGatewayErrorEnvelope, a as normalizeChatCompletion, b as classifyStatus, f as createTransport$1, g as headersToObject, h as errorFromResponse$1, i as normalizeChatCompletionsStream, m as errorFromGatewayEnvelope$1, n as imageMediaTypeOf, o as prepareChatCompletionsRequest, p as definedHeaders, r as sseDataStream, t as buildImageInput, u as requireGatewayProvider, v as unwrapEnvelope$1, x as isAbortError, y as CloudflareAIError$1 } from "./images-Ce9SCu3X.js";
+import { C as isDynamicRouteId, S as isRetryableStatus, _ as isGatewayErrorEnvelope, a as normalizeChatCompletion, b as classifyStatus, f as createTransport$1, g as headersToObject, h as errorFromResponse$1, i as normalizeChatCompletionsStream, m as errorFromGatewayEnvelope$1, n as imageMediaTypeOf, o as prepareChatCompletionsRequest, p as definedHeaders, r as sseDataStream, t as buildImageInput, u as requireGatewayProvider, v as unwrapEnvelope$1, w as isRunPathLanguageModelId, x as isAbortError, y as CloudflareAIError$1 } from "./images-C4hiIexM.js";
+import { a as parseModelOptions, i as mergeModelOptions, n as PROVIDER_OPTIONS_KEY, o as resolveOptions, r as gatewayLayerOf } from "./settings-BjAiPd6Z.js";
 import { APICallError, TooManyEmbeddingValuesForCallError } from "@ai-sdk/provider";
 //#region src/models/ai-sdk/errors.ts
 /** The provider packages worth naming when someone passes a vendor id. */
@@ -24,10 +24,10 @@ const VENDOR_PACKAGES = {
 * this provider knows; a third-party model is a model object built by that
 * vendor's own provider package.
 */
-function notAWorkersAIId(modelId) {
+function notAWorkersAIId(modelId, accepts = "workers-ai") {
 	const vendor = VENDOR_PACKAGES[modelId.split("/")[0] ?? ""];
 	const advice = vendor === void 0 ? "install its AI SDK provider package and pass the model object, e.g. ai(anthropic(\"claude-opus-4-8\"))" : `install ${vendor.package} and pass the model object: ai(${vendor.call})`;
-	return /* @__PURE__ */ new TypeError(`"${modelId}" is not a Workers AI model id. Workers AI ids start with "@cf/", and they are the only ids this provider takes: a third-party model goes through its own provider and is only routed by AI Gateway — ${advice}.`);
+	return /* @__PURE__ */ new TypeError(`"${modelId}" is not a Workers AI model id. Workers AI ids start with "@cf/"${accepts === "workers-ai-or-route" ? " (and AI Gateway dynamic routes with \"dynamic/\")" : ""}, and they are the only ids this provider takes: a third-party model goes through its own provider and is only routed by AI Gateway — ${advice}.`);
 }
 /**
 * The gate every string that names a model passes through, wherever it enters
@@ -36,10 +36,20 @@ function notAWorkersAIId(modelId) {
 * the line that supplied the id rather than at the request it would have made.
 */
 function requireWorkersAIId(modelId) {
+	if (isDynamicRouteId(modelId)) throw new TypeError(`"${modelId}" is an AI Gateway dynamic route, and a dynamic route is a chat model: it answers in the chat-completions shape. Use it as ai("${modelId}"); the embedding, image, speech, transcription and reranking methods take "@cf/" ids.`);
 	if (!modelId.startsWith("@cf/")) throw notAWorkersAIId(modelId);
 	return modelId;
 }
 /**
+* The gate for ids that name a language model: a Workers AI id, or an AI
+* Gateway dynamic route. Both run on `env.AI.run`; any other string is a
+* vendor id, which is never a string here.
+*/
+function requireLanguageModelId(modelId) {
+	if (!isRunPathLanguageModelId(modelId)) throw notAWorkersAIId(modelId, "workers-ai-or-route");
+	return modelId;
+}
+/**
 * Error thrown for every failed Cloudflare AI call, whether it came back as a
 * non-2xx `Response` or as a thrown Workers AI binding error.
 *
@@ -117,6 +127,19 @@ function fallbackLegs(model, call) {
 * @experimental This surface is experimental and may change.
 */
 function parseCallOptions(providerOptions) {
+	const options = parseModelOptions(providerOptions?.[PROVIDER_OPTIONS_KEY]);
+	for (const leg of options?.fallback ?? []) requireLanguageModelId(leg);
+	return options;
+}
+/**
+* Per-call options for the modality models — embedding, image, speech,
+* transcription, reranking. The same bag as {@link parseCallOptions}, but a
+* fallback leg must be a Workers AI id: a dynamic route answers in the
+* chat-completions shape, which none of those models can read.
+*
+* @experimental This surface is experimental and may change.
+*/
+function parseModalityCallOptions(providerOptions) {
 	const options = parseModelOptions(providerOptions?.[PROVIDER_OPTIONS_KEY]);
 	for (const leg of options?.fallback ?? []) requireWorkersAIId(leg);
 	return options;
@@ -489,7 +512,7 @@ var CloudflareEmbeddingModel = class {
 			provider: this.provider,
 			values: options.values
 		});
-		const resolved = resolveOptions(_classPrivateFieldGet2(_config$3, this).providerGateway, _classPrivateFieldGet2(_options$3, this), parseCallOptions(options.providerOptions));
+		const resolved = resolveOptions(_classPrivateFieldGet2(_config$3, this).providerGateway, _classPrivateFieldGet2(_options$3, this), parseModalityCallOptions(options.providerOptions));
 		const input = { text: options.values };
 		const transport = _classPrivateFieldGet2(_config$3, this).transport;
 		return withFallback(this.modelId, resolved.fallback, transport.url, async (modelId) => {
@@ -1394,7 +1417,7 @@ function _withFallback$1(call, runLeg, runSelf, mode = "generate") {
 		model: this.modelId,
 		run: () => runSelf(this.modelId)
 	}, ...legs.map((leg) => typeof leg === "string" ? {
-		model: requireWorkersAIId(leg),
+		model: requireLanguageModelId(leg),
 		run: () => runSelf(leg)
 	} : {
 		model: leg.modelId,
@@ -1465,12 +1488,13 @@ function universalQuery(body) {
 	}
 }
 /**
-* The vendor's own request headers, minus the credential the gateway supplies
-* itself and the length of a body we are about to re-serialize.
+* The vendor's own request headers, minus the length of a body we are about
+* to re-serialize, and minus the vendor's credential unless the model asked
+* for it to be forwarded.
 */
-function forwardedHeaders(init, input, route) {
+function forwardedHeaders(init, input, route, vendorKey) {
 	const source = init?.headers ?? (input instanceof Request ? input.headers : void 0);
-	const dropped = /* @__PURE__ */ new Set([...route.authHeaders, "content-length"]);
+	const dropped = /* @__PURE__ */ new Set([...vendorKey === "request" ? [] : route.authHeaders, "content-length"]);
 	const headers = {};
 	new Headers(source).forEach((value, key) => {
 		if (!dropped.has(key.toLowerCase())) headers[key] = value;
@@ -1504,7 +1528,7 @@ function routedFetch(context) {
 			endpoint: route.endpoint,
 			...Object.keys(extraHeaders).length > 0 ? { extraHeaders } : {},
 			gateway: resolved.gateway,
-			headers: forwardedHeaders(init, input, route),
+			headers: forwardedHeaders(init, input, route, context.vendorKey),
 			provider: route.provider,
 			query,
 			signal: init?.signal ?? (input instanceof Request ? input.signal : void 0) ?? context.signal
@@ -1709,7 +1733,8 @@ function _route(resolved, capture, signal) {
 		capture,
 		config: _classPrivateFieldGet2(_config$1, this),
 		resolved,
-		signal
+		signal,
+		vendorKey: _classPrivateFieldGet2(_options$1, this)?.vendorKey ?? "gateway"
 	}));
 }
 function _resolve(call) {
@@ -1752,7 +1777,7 @@ function _withFallback(call, runLeg, run, mode = "generate") {
 }
 /** A Workers AI leg, carrying this model's gateway options but no chain. */
 function _workersAI(modelId) {
-	return new CloudflareLanguageModel(requireWorkersAIId(modelId), {
+	return new CloudflareLanguageModel(requireLanguageModelId(modelId), {
 		..._classPrivateFieldGet2(_options$1, this),
 		fallback: void 0
 	}, _classPrivateFieldGet2(_config$1, this));
@@ -1779,7 +1804,8 @@ function routed(model, options, config) {
 				capture,
 				config,
 				resolved,
-				signal: call?.abortSignal
+				signal: call?.abortSignal,
+				vendorKey: options?.vendorKey ?? "gateway"
 			}));
 			const result = await Reflect.get(clone, property).call(clone, upstream);
 			if (result === null || typeof result !== "object") return result;
@@ -1843,7 +1869,7 @@ var CloudflareModalityModel = class {
 	* as JSON or as raw bytes depending on what the model sent back.
 	*/
 	async send(call) {
-		const resolved = resolveOptions(_classPrivateFieldGet2(_config, this).providerGateway, _classPrivateFieldGet2(_options, this), parseCallOptions(call.providerOptions));
+		const resolved = resolveOptions(_classPrivateFieldGet2(_config, this).providerGateway, _classPrivateFieldGet2(_options, this), parseModalityCallOptions(call.providerOptions));
 		const transport = _classPrivateFieldGet2(_config, this).transport;
 		return withFallback(this.modelId, resolved.fallback, transport.url, async (modelId) => {
 			const request = call.build(modelId);
@@ -2397,7 +2423,7 @@ function createAI(settings) {
 		const inherited = gatewayLayerOf(options);
 		return {
 			...options,
-			fallback: options.fallback.map((leg) => typeof leg === "string" ? requireWorkersAIId(leg) : languageModel(leg, inherited))
+			fallback: options.fallback.map((leg) => typeof leg === "string" ? requireLanguageModelId(leg) : languageModel(leg, inherited))
 		};
 	};
 	function languageModel(model, options) {
@@ -2413,7 +2439,7 @@ function createAI(settings) {
 			}
 			return new GatewayLanguageModel(model, resolved, config);
 		}
-		return new CloudflareLanguageModel(requireWorkersAIId(model), resolved, config);
+		return new CloudflareLanguageModel(requireLanguageModelId(model), resolved, config);
 	}
 	const embedding = (modelId, options) => new CloudflareEmbeddingModel(modelId, options, config);
 	const image = (modelId, options) => new CloudflareImageModel(modelId, options, config);
@@ -2441,4 +2467,4 @@ function createAI(settings) {
 //#endregion
 export { GatewayLanguageModel as n, CloudflareAIError as r, createAI as t };
 
-//# sourceMappingURL=ai-sdk-OoGkFy3s.js.map
+//# sourceMappingURL=ai-sdk-C2iTAwUd.js.map