@ai-sdk/provider-utils 5.0.0 → 5.0.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @ai-sdk/provider-utils
 
+## 5.0.1
+
+### Patch Changes
+
+- 6a436e3: Limit JSON response body reads in response handlers to prevent unbounded memory use.
+
 ## 5.0.0
 
 ### Major Changes

package/dist/index.js

@@ -971,7 +971,7 @@ function withUserAgentSuffix(headers, ...userAgentSuffixParts) {
 }
 
 // src/version.ts
-var VERSION = true ? "5.0.0" : "0.0.0-test";
+var VERSION = true ? "5.0.1" : "0.0.0-test";
 
 // src/get-from-api.ts
 var getOriginalFetch = () => globalThis.fetch;
@@ -3074,12 +3074,24 @@ function resolveProviderReference({
 
 // src/response-handler.ts
 import { APICallError as APICallError4, EmptyResponseBodyError } from "@ai-sdk/provider";
+var textDecoder = new TextDecoder();
+async function readResponseBodyAsText({
+  response,
+  url
+}) {
+  return textDecoder.decode(
+    await readResponseWithSizeLimit({
+      response,
+      url
+    })
+  );
+}
 var createJsonErrorResponseHandler = ({
   errorSchema,
   errorToMessage,
   isRetryable
 }) => async ({ response, url, requestBodyValues }) => {
-  const responseBody = await response.text();
+  const responseBody = await readResponseBodyAsText({ response, url });
   const responseHeaders = extractResponseHeaders(response);
   if (responseBody.trim() === "") {
     return {
@@ -3142,7 +3154,7 @@ var createEventSourceResponseHandler = (chunkSchema) => async ({ response }) =>
   };
 };
 var createJsonResponseHandler = (responseSchema) => async ({ response, url, requestBodyValues }) => {
-  const responseBody = await response.text();
+  const responseBody = await readResponseBodyAsText({ response, url });
   const parsedResult = await safeParseJSON({
     text: responseBody,
     schema: responseSchema
@@ -3197,7 +3209,7 @@ var createBinaryResponseHandler = () => async ({ response, url, requestBodyValue
 };
 var createStatusCodeErrorResponseHandler = () => async ({ response, url, requestBodyValues }) => {
   const responseHeaders = extractResponseHeaders(response);
-  const responseBody = await response.text();
+  const responseBody = await readResponseBodyAsText({ response, url });
   return {
     responseHeaders,
     value: new APICallError4({