@ai-sdk/provider-utils 3.0.27 → 3.0.28

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @ai-sdk/provider-utils
 
+## 3.0.28
+
+### Patch Changes
+
+- b85c4fb: Limit JSON response body reads in response handlers to prevent unbounded memory use.
+
 ## 3.0.27
 
 ### Patch Changes

package/dist/index.js

@@ -640,7 +640,7 @@ function withUserAgentSuffix(headers, ...userAgentSuffixParts) {
 }
 
 // src/version.ts
-var VERSION = true ? "3.0.27" : "0.0.0-test";
+var VERSION = true ? "3.0.28" : "0.0.0-test";
 
 // src/get-from-api.ts
 var getOriginalFetch = () => globalThis.fetch;
@@ -1286,12 +1286,24 @@ async function resolve(value) {
 
 // src/response-handler.ts
 var import_provider12 = require("@ai-sdk/provider");
+var textDecoder = new TextDecoder();
+async function readResponseBodyAsText({
+  response,
+  url
+}) {
+  return textDecoder.decode(
+    await readResponseWithSizeLimit({
+      response,
+      url
+    })
+  );
+}
 var createJsonErrorResponseHandler = ({
   errorSchema,
   errorToMessage,
   isRetryable
 }) => async ({ response, url, requestBodyValues }) => {
-  const responseBody = await response.text();
+  const responseBody = await readResponseBodyAsText({ response, url });
   const responseHeaders = extractResponseHeaders(response);
   if (responseBody.trim() === "") {
     return {
@@ -1381,7 +1393,7 @@ var createJsonStreamResponseHandler = (chunkSchema) => async ({ response }) => {
   };
 };
 var createJsonResponseHandler = (responseSchema) => async ({ response, url, requestBodyValues }) => {
-  const responseBody = await response.text();
+  const responseBody = await readResponseBodyAsText({ response, url });
   const parsedResult = await safeParseJSON({
     text: responseBody,
     schema: responseSchema
@@ -1436,7 +1448,7 @@ var createBinaryResponseHandler = () => async ({ response, url, requestBodyValue
 };
 var createStatusCodeErrorResponseHandler = () => async ({ response, url, requestBodyValues }) => {
   const responseHeaders = extractResponseHeaders(response);
-  const responseBody = await response.text();
+  const responseBody = await readResponseBodyAsText({ response, url });
   return {
     responseHeaders,
     value: new import_provider12.APICallError({