@ai-sdk/provider-utils 5.0.47 → 5.0.49

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # @ai-sdk/provider-utils
 
+## 5.0.49
+
+### Patch Changes
+
+- af9597b: Compile packages for ES2022 runtime target
+- bc49f78: Preserve original opaque URI strings in tagged file URLs during prompt conversion. Match explicit supported URL MIME types exactly so unsupported subtypes are not forwarded to providers.
+
+## 5.0.48
+
+### Patch Changes
+
+- be877ff: Add `fetchUntrustedUrl`, an opt-in fetch helper that withholds credentials and
+  unknown custom headers from untrusted first-hop URLs. A matching configured
+  `credentialedOrigin` (or `trustedOrigin` when omitted) allows sanitized caller
+  headers. Otherwise only allowlisted metadata is sent; callers can explicitly
+  allow additional non-credential metadata with `untrustedFirstHopHeaders`.
+
+  The helper shares URL validation, DNS pinning, and redirect protection with
+  `fetchWithValidatedRedirects`, and is now used by `downloadBlob`.
+  `fetchWithValidatedRedirects` and `getFromApi` retain their existing behavior.
+  Direct callers must opt into the new helper for first-hop credential isolation;
+  existing authenticated and custom-header requests are not silently changed.
+
 ## 5.0.47
 
 ### Patch Changes

package/dist/experimental-evaluation/index.js

@@ -51,7 +51,7 @@ function secureJsonParse(text) {
   const { stackTraceLimit } = Error;
   try {
     Error.stackTraceLimit = 0;
-  } catch (e) {
+  } catch {
     return _parse(text);
   }
   try {
@@ -148,11 +148,10 @@ function parseAnyDef() {
 
 // src/to-json-schema/zod3-to-json-schema/parsers/array.ts
 function parseArrayDef(def, refs) {
-  var _a, _b, _c;
   const res = {
     type: "array"
   };
-  if (((_a = def.type) == null ? void 0 : _a._def) && ((_c = (_b = def.type) == null ? void 0 : _b._def) == null ? void 0 : _c.typeName) !== "ZodAny") {
+  if (def.type?._def && def.type?._def?.typeName !== "ZodAny") {
     res.items = parseDef(def.type._def, {
       ...refs,
       currentPath: [...refs.currentPath, "items"]
@@ -219,7 +218,7 @@ var parseCatchDef = (def, refs) => {
 
 // src/to-json-schema/zod3-to-json-schema/parsers/date.ts
 function parseDateDef(def, refs, overrideDateStrategy) {
-  const strategy = overrideDateStrategy != null ? overrideDateStrategy : refs.dateStrategy;
+  const strategy = overrideDateStrategy ?? refs.dateStrategy;
   if (Array.isArray(strategy)) {
     return {
       anyOf: strategy.map((item) => parseDateDef(def, refs, item))
@@ -540,8 +539,7 @@ function escapeNonAlphaNumeric(source) {
   return result;
 }
 function addFormat(schema, value, message, refs) {
-  var _a;
-  if (schema.format || ((_a = schema.anyOf) == null ? void 0 : _a.some((x) => x.format))) {
+  if (schema.format || schema.anyOf?.some((x) => x.format)) {
     if (!schema.anyOf) {
       schema.anyOf = [];
     }
@@ -560,8 +558,7 @@ function addFormat(schema, value, message, refs) {
   }
 }
 function addPattern(schema, regex, message, refs) {
-  var _a;
-  if (schema.pattern || ((_a = schema.allOf) == null ? void 0 : _a.some((x) => x.pattern))) {
+  if (schema.pattern || schema.allOf?.some((x) => x.pattern)) {
     if (!schema.allOf) {
       schema.allOf = [];
     }
@@ -580,7 +577,6 @@ function addPattern(schema, regex, message, refs) {
   }
 }
 function stringifyRegExpWithFlags(regex, refs) {
-  var _a;
   if (!refs.applyRegexFlags || !regex.flags) {
     return regex.source;
   }
@@ -610,7 +606,7 @@ function stringifyRegExpWithFlags(regex, refs) {
             pattern += source[i];
             pattern += `${source[i - 2]}-${source[i]}`.toUpperCase();
             inCharRange = false;
-          } else if (source[i + 1] === "-" && ((_a = source[i + 2]) == null ? void 0 : _a.match(/[a-z]/))) {
+          } else if (source[i + 1] === "-" && source[i + 2]?.match(/[a-z]/)) {
             pattern += source[i];
             inCharRange = true;
           } else {
@@ -651,7 +647,7 @@ function stringifyRegExpWithFlags(regex, refs) {
   }
   try {
     new RegExp(pattern);
-  } catch (e) {
+  } catch {
     console.warn(
       `Could not convert regex pattern at ${refs.currentPath.join(
         "/"
@@ -664,28 +660,27 @@ function stringifyRegExpWithFlags(regex, refs) {
 
 // src/to-json-schema/zod3-to-json-schema/parsers/record.ts
 function parseRecordDef(def, refs) {
-  var _a, _b, _c, _d, _e, _f;
   const schema = {
     type: "object",
-    additionalProperties: (_a = parseDef(def.valueType._def, {
+    additionalProperties: parseDef(def.valueType._def, {
       ...refs,
       currentPath: [...refs.currentPath, "additionalProperties"]
-    })) != null ? _a : refs.allowedAdditionalProperties
+    }) ?? refs.allowedAdditionalProperties
   };
-  if (((_b = def.keyType) == null ? void 0 : _b._def.typeName) === "ZodString" && ((_c = def.keyType._def.checks) == null ? void 0 : _c.length)) {
+  if (def.keyType?._def.typeName === "ZodString" && def.keyType._def.checks?.length) {
     const { type: _type, ...keyType } = parseStringDef(def.keyType._def, refs);
     return {
       ...schema,
       propertyNames: keyType
     };
-  } else if (((_d = def.keyType) == null ? void 0 : _d._def.typeName) === "ZodEnum") {
+  } else if (def.keyType?._def.typeName === "ZodEnum") {
     return {
       ...schema,
       propertyNames: {
         enum: def.keyType._def.values
       }
     };
-  } else if (((_e = def.keyType) == null ? void 0 : _e._def.typeName) === "ZodBranded" && def.keyType._def.type._def.typeName === "ZodString" && ((_f = def.keyType._def.type._def.checks) == null ? void 0 : _f.length)) {
+  } else if (def.keyType?._def.typeName === "ZodBranded" && def.keyType._def.type._def.typeName === "ZodString" && def.keyType._def.type._def.checks?.length) {
     const { type: _type, ...keyType } = parseBrandedDef(
       def.keyType._def,
       refs
@@ -938,15 +933,14 @@ function decideAdditionalProperties(def, refs) {
 function safeIsOptional(schema) {
   try {
     return schema.isOptional();
-  } catch (e) {
+  } catch {
     return true;
   }
 }
 
 // src/to-json-schema/zod3-to-json-schema/parsers/optional.ts
 var parseOptionalDef = (def, refs) => {
-  var _a;
-  if (refs.currentPath.toString() === ((_a = refs.propertyPath) == null ? void 0 : _a.toString())) {
+  if (refs.currentPath.toString() === refs.propertyPath?.toString()) {
     return parseDef(def.innerType._def, refs);
   }
   const innerSchema = parseDef(def.innerType._def, {
@@ -1145,11 +1139,9 @@ var getRelativePath = (pathA, pathB) => {
 
 // src/to-json-schema/zod3-to-json-schema/parse-def.ts
 function parseDef(def, refs, forceResolution = false) {
-  var _a;
   const seenItem = refs.seen.get(def);
   if (refs.override) {
-    const overrideResult = (_a = refs.override) == null ? void 0 : _a.call(
-      refs,
+    const overrideResult = refs.override?.(
       def,
       refs,
       seenItem,
@@ -1231,34 +1223,30 @@ var getRefs = (options) => {
 
 // src/to-json-schema/zod3-to-json-schema/zod3-to-json-schema.ts
 var zod3ToJsonSchema = (schema, options) => {
-  var _a;
   const refs = getRefs(options);
   let definitions = typeof options === "object" && options.definitions ? Object.entries(options.definitions).reduce(
-    (acc, [name2, schema2]) => {
-      var _a2;
-      return {
-        ...acc,
-        [name2]: (_a2 = parseDef(
-          schema2._def,
-          {
-            ...refs,
-            currentPath: [...refs.basePath, refs.definitionPath, name2]
-          },
-          true
-        )) != null ? _a2 : parseAnyDef()
-      };
-    },
+    (acc, [name2, schema2]) => ({
+      ...acc,
+      [name2]: parseDef(
+        schema2._def,
+        {
+          ...refs,
+          currentPath: [...refs.basePath, refs.definitionPath, name2]
+        },
+        true
+      ) ?? parseAnyDef()
+    }),
     {}
   ) : void 0;
-  const name = typeof options === "string" ? options : (options == null ? void 0 : options.nameStrategy) === "title" ? void 0 : options == null ? void 0 : options.name;
-  const main = (_a = parseDef(
+  const name = typeof options === "string" ? options : options?.nameStrategy === "title" ? void 0 : options?.name;
+  const main = parseDef(
     schema._def,
     name === void 0 ? refs : {
       ...refs,
       currentPath: [...refs.basePath, refs.definitionPath, name]
     },
     false
-  )) != null ? _a : parseAnyDef();
+  ) ?? parseAnyDef();
   const title = typeof options === "object" && options.name !== void 0 && options.nameStrategy === "title" ? options.name : void 0;
   if (title !== void 0) {
     main.title = title;
@@ -1341,8 +1329,7 @@ function hasStandardJsonSchema(schema) {
   return schema["~standard"].jsonSchema != null;
 }
 function zod3Schema(zodSchema2, options) {
-  var _a;
-  const useReferences = (_a = options == null ? void 0 : options.useReferences) != null ? _a : false;
+  const useReferences = options?.useReferences ?? false;
   return jsonSchema(
     // defer json schema creation to avoid unnecessary computation when only validation is needed
     () => zod3ToJsonSchema(zodSchema2, {
@@ -1357,8 +1344,7 @@ function zod3Schema(zodSchema2, options) {
   );
 }
 function zod4Schema(zodSchema2, options) {
-  var _a;
-  const useReferences = (_a = options == null ? void 0 : options.useReferences) != null ? _a : false;
+  const useReferences = options?.useReferences ?? false;
   return jsonSchema(
     // defer json schema creation to avoid unnecessary computation when only validation is needed
     () => addAdditionalPropertiesToJsonSchema(
@@ -1469,7 +1455,7 @@ var EvaluationLanguageModel = class _EvaluationLanguageModel {
     headers,
     providerOptions
   }) {
-    abortSignal == null ? void 0 : abortSignal.throwIfAborted();
+    abortSignal?.throwIfAborted();
     const entries = Object.entries(questions).map(([id, question]) => {
       if (!this.supportedQuestionTypes.includes(question.type)) {
         throw new EvaluationUnsupportedQuestionTypeError({
@@ -1556,7 +1542,7 @@ var EvaluationLanguageModel = class _EvaluationLanguageModel {
       headers,
       providerOptions
     });
-    abortSignal == null ? void 0 : abortSignal.throwIfAborted();
+    abortSignal?.throwIfAborted();
     if (result.finishReason.unified !== "stop") {
       throw new InvalidResponseDataError({
         data: result,