@ai-sdk/provider-utils 5.0.43 → 5.0.45

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdk/provider-utils",
-  "version": "5.0.43",
+  "version": "5.0.45",
   "type": "module",
   "license": "Apache-2.0",
   "sideEffects": false,

package/src/detect-media-type.ts

@@ -49,13 +49,35 @@ const imageMediaTypeSignatures = [
   {
     mediaType: 'image/avif' as const,
     bytesPrefix: [
-      0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70, 0x61, 0x76, 0x69, 0x66,
+      0x00,
+      0x00,
+      0x00,
+      null, // box size (variable)
+      0x66,
+      0x74,
+      0x79,
+      0x70,
+      0x61,
+      0x76,
+      0x69,
+      0x66,
     ],
   },
   {
     mediaType: 'image/heic' as const,
     bytesPrefix: [
-      0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70, 0x68, 0x65, 0x69, 0x63,
+      0x00,
+      0x00,
+      0x00,
+      null, // box size (variable)
+      0x66,
+      0x74,
+      0x79,
+      0x70,
+      0x68,
+      0x65,
+      0x69,
+      0x63,
     ],
   },
 ] as const;
@@ -68,6 +90,22 @@ const documentMediaTypeSignatures = [
 ] as const;
 
 const audioMediaTypeSignaturesWithoutMp4 = [
+  {
+    mediaType: 'audio/aac' as const,
+    bytesPrefix: [0xff, 0xf0], // MPEG-4 ADTS with CRC
+  },
+  {
+    mediaType: 'audio/aac' as const,
+    bytesPrefix: [0xff, 0xf1], // MPEG-4 ADTS without CRC
+  },
+  {
+    mediaType: 'audio/aac' as const,
+    bytesPrefix: [0xff, 0xf8], // MPEG-2 ADTS with CRC
+  },
+  {
+    mediaType: 'audio/aac' as const,
+    bytesPrefix: [0xff, 0xf9], // MPEG-2 ADTS without CRC
+  },
   {
     mediaType: 'audio/mpeg' as const,
     bytesPrefix: [0xff, 0xfb],

package/src/fetch-with-validated-redirects.ts

@@ -183,10 +183,11 @@ export async function fetchWithValidatedRedirects({
 
     const location = response.headers?.get('location');
     if (REDIRECT_STATUS_CODES.has(response.status) && location) {
-      // Release the redirect response's connection before moving to the next
-      // hop. Whether that hop is followed or rejected by the guard, an
-      // unconsumed 3xx body would leak the underlying socket.
-      await cancelResponseBody(response);
+      // Start releasing the redirect response's connection before moving to
+      // the next hop. Do not wait for cancellation: when a fetch wrapper keeps
+      // an unread response clone, tee cancellation can remain pending until
+      // the cloned branch is consumed.
+      void cancelResponseBody(response);
       const nextUrl = new URL(location, currentUrl).toString();
 
       // Drop all caller headers except the user-agent before following a

package/src/safe-node-fetch.ts

@@ -134,13 +134,16 @@ export async function getDefaultDownloadFetch(): Promise<FetchFunction> {
 }
 
 function createSafeNodeFetch(): FetchFunction {
-  // Load Node-only modules indirectly so browser bundlers do not pull undici
-  // and Node built-ins into the browser-facing provider-utils entry point.
-  const { createRequire } = loadBuiltinModule<NodeModule>('node:module');
+  // @vercel/nft (node file trace) only recognizes an indirectly loaded createRequire when its receiver
+  // is named `module` and the returned require function is assigned.
+  // eslint-disable-next-line @next/next/no-assign-module-variable
+  const module = loadBuiltinModule<NodeModule>('node:module');
   const { lookup } = loadBuiltinModule<NodeDns>('node:dns');
-  const { Agent, fetch } = createRequire(getCurrentModulePath())(
-    'undici',
-  ) as Undici;
+
+  // Assign the created require function so deployment tracers can recognize
+  // the static dependency without bundlers inlining undici.
+  const nodeRequire = module.createRequire(getCurrentModulePath());
+  const { Agent, fetch } = nodeRequire('undici') as Undici;
 
   const dispatcher = new Agent({
     connect: {