@ai-sdk/provider-utils 5.0.64 → 5.0.65

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdk/provider-utils",
-  "version": "5.0.64",
+  "version": "5.0.65",
   "type": "module",
   "license": "Apache-2.0",
   "sideEffects": false,

package/src/encode-path-segment.ts

@@ -0,0 +1,15 @@
+/**
+ * Encodes a raw identifier as one URL path segment, including standalone dot
+ * segments that URL parsers would otherwise normalize. Pass unencoded values;
+ * for resource paths with intentional slashes, encode each segment separately.
+ */
+export function encodePathSegment(value: string): string {
+  const encodedValue = encodeURIComponent(value);
+
+  // URL parsing normalizes both literal and percent-encoded dot segments.
+  return encodedValue === '.'
+    ? '%252E'
+    : encodedValue === '..'
+      ? '%252E%252E'
+      : encodedValue;
+}

package/src/index.ts

@@ -40,6 +40,7 @@ export {
   fetchWithValidatedEndpoint,
   fetchWithValidatedRedirects,
 } from './fetch-with-validated-redirects';
+export { encodePathSegment } from './encode-path-segment';
 export { extractLines } from './extract-lines';
 export * from './extract-response-headers';
 export * from './fetch-function';

package/src/validate-download-url.ts

@@ -46,11 +46,12 @@ export function validateDownloadUrl(url: string): void {
     });
   }
 
-  // Block localhost and .local domains
+  // Block localhost and domains reserved for local/private use.
   if (
     hostname === 'localhost' ||
     hostname.endsWith('.local') ||
-    hostname.endsWith('.localhost')
+    hostname.endsWith('.localhost') ||
+    hostname.endsWith('.internal')
   ) {
     throw new DownloadError({
       url,