Patch Changes
-
49c554d: Validate response-supplied Black Forest Labs polling and image URLs, including redirects, to block requests to private destinations outside the configured provider origin. Preserve self-hosted endpoints and withhold credentials from foreign origins and cross-origin redirects.
-
ec24878: fix: poll get_result when a webhook submit response has no polling URL
Setting
webhookUrlmakes Black Forest Labs return a webhook-shaped submit
response withoutpolling_url, which causedgenerateImageto fail response
validation. The submit schema now accepts that response shape, and generation
polls theget_resultendpoint by request id so the call still returns the
image. TransientTask not foundresponses are retried for a short grace
period; a task that never becomes visible now fails with an error naming the
request id instead of a generic poll timeout. -
Updated dependencies [49c554d]
-
Updated dependencies [b753c03]
- @ai-sdk/provider-utils@3.0.45