@ai-sdk/provider-utils 4.0.31 → 4.0.33

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @ai-sdk/provider-utils
 
+## 4.0.33
+
+### Patch Changes
+
+- b30e43a: Limit JSON response body reads in response handlers to prevent unbounded memory use.
+
+## 4.0.32
+
+### Patch Changes
+
+- Updated dependencies [f19334d]
+  - @ai-sdk/provider@3.0.12
+
 ## 4.0.31
 
 ### Patch Changes

package/dist/index.js

@@ -777,7 +777,7 @@ function withUserAgentSuffix(headers, ...userAgentSuffixParts) {
 }
 
 // src/version.ts
-var VERSION = true ? "4.0.31" : "0.0.0-test";
+var VERSION = true ? "4.0.33" : "0.0.0-test";
 
 // src/get-from-api.ts
 var getOriginalFetch = () => globalThis.fetch;
@@ -2717,12 +2717,24 @@ async function resolve(value) {
 
 // src/response-handler.ts
 var import_provider12 = require("@ai-sdk/provider");
+var textDecoder = new TextDecoder();
+async function readResponseBodyAsText({
+  response,
+  url
+}) {
+  return textDecoder.decode(
+    await readResponseWithSizeLimit({
+      response,
+      url
+    })
+  );
+}
 var createJsonErrorResponseHandler = ({
   errorSchema,
   errorToMessage,
   isRetryable
 }) => async ({ response, url, requestBodyValues }) => {
-  const responseBody = await response.text();
+  const responseBody = await readResponseBodyAsText({ response, url });
   const responseHeaders = extractResponseHeaders(response);
   if (responseBody.trim() === "") {
     return {
@@ -2785,7 +2797,7 @@ var createEventSourceResponseHandler = (chunkSchema) => async ({ response }) =>
   };
 };
 var createJsonResponseHandler = (responseSchema) => async ({ response, url, requestBodyValues }) => {
-  const responseBody = await response.text();
+  const responseBody = await readResponseBodyAsText({ response, url });
   const parsedResult = await safeParseJSON({
     text: responseBody,
     schema: responseSchema
@@ -2840,7 +2852,7 @@ var createBinaryResponseHandler = () => async ({ response, url, requestBodyValue
 };
 var createStatusCodeErrorResponseHandler = () => async ({ response, url, requestBodyValues }) => {
   const responseHeaders = extractResponseHeaders(response);
-  const responseBody = await response.text();
+  const responseBody = await readResponseBodyAsText({ response, url });
   return {
     responseHeaders,
     value: new import_provider12.APICallError({