@broberg/ai-sdk 0.66.0 → 0.66.1

package/dist/index.d.ts

@@ -253,6 +253,27 @@ interface Contracts {
     rerank(input: RerankInput): Promise<RerankResult>;
 }
 
+/** Upper bounds on every array the SDK accepts (F082.2, GHSA-mrhx-c7xc-m3w5). zod
+ *  4.6.7 stops at the first issue only when an array has a `.max()`; without one,
+ *  200k bad elements still produce 200k issues (buddy + cms measured, 24 Oct 2026).
+ *  Set far above real use on purpose — the owner asked for cautious limits, so a
+ *  bound that rejects a legitimate call is the failure to avoid, not a loose one. */
+declare const INPUT_LIMITS: {
+    readonly messages: 10000;
+    readonly contentParts: 1000;
+    readonly toolCalls: 1000;
+    readonly tools: 1000;
+    readonly fallback: 32;
+    readonly loras: 32;
+    readonly trainImages: 1000;
+    readonly texts: 10000;
+    readonly phrases: 10000;
+    readonly granularities: 10;
+    readonly judgeEntryItems: 1000;
+    readonly stateItems: 10000;
+    readonly scriptLines: 10000;
+    readonly pronunciations: 10000;
+};
 declare const tierSpecSchema: z.ZodObject<{
     provider: z.ZodString;
     model: z.ZodString;
@@ -1408,8 +1429,8 @@ declare const falStubAdapter: ProviderAdapter;
  *  wires the live adapters. */
 declare const stubProviders: Record<string, ProviderAdapter>;
 
-declare const VERSION: "0.66.0";
-declare const SDK_TAG: "@broberg/ai-sdk@0.66.0";
+declare const VERSION: "0.66.1";
+declare const SDK_TAG: "@broberg/ai-sdk@0.66.1";
 
 /** Built-in defaults. Every entry is overridable via AiConfig.defaults or a
  *  per-call override.
@@ -1975,4 +1996,4 @@ declare function memorySearchCache(max?: number): SearchCache;
 
 declare function search(req: SearchRequest, opts?: SearchOptions): Promise<SearchResult>;
 
-export { AZURE_DANISH_VOICES, AZURE_DANISH_VOICE_LIST, type AiClient, type AiConfig, type AzureVoiceInfo, BatchJob, BatchRequestItem, BatchResultItem, type BflAdapterConfig, type BflCredits, BudgetConfig, BudgetExceededError, BudgetGuard, BudgetStore, CONFIG_DERIVED_HOSTS, Capability, type ChatInput, ChatResult, ChatStreamEvent, type CheckVoiceOptions, type ClassifyInput, type ClassifyResult, type Contracts, type CostQuery, CostSink, type CostSummary, type CostSummaryQuery, type CostTimeseriesQuery, DEFAULT_BASE_URLS, DEFAULT_SEARCH_ROUTES, DEFAULT_TIER_MAP, type DesignInput, type DesignResult, type DiscordSinkConfig, ELEVENLABS_DANISH_VOICES, type EmbeddingInput, EmbeddingResult, type ExtractInput, type ExtractResult, type FalAdapterConfig, type FixedHostProvider, type HttpResponse, type ImageInput, ImageResult, type JudgeInput, JudgeResult, LOCALLY_PINNED_HOSTS, type MockupInput, type MockupResult, type ModerationInput, ModerationResult, type OcrInput, OcrResult, type OpenAICompatibleConfig, type PodcastInput, PodcastResult, type PriceDriftResult, type PriceDriftRow, type PricingEntry, ProviderAdapter, type RefreshOptions, type RefreshResult, Region, type RerankInput, type RerankResult, type RouteForecast, SDK_TAG, SEARCH_CACHE_TTL_MS, SEARCH_PRICE_USD, SearchBudgetExceededError, type SearchCache, type SearchCapStore, type SearchCredentials, type SearchItem, SearchKeyMissingError, type SearchOptions, type SearchProviderId, type SearchPurpose, type SearchRequest, type SearchResult, type SearchRoute, type SqliteBudgetStoreConfig, type SqliteSinkConfig, StreamHttpError, type SubprocessResponse, Tier, TierSpec, Tool, ToolCall, type TrainStyleInput, TrainStyleResult, type TranscribeInput, TranscribeResult, type TranslateInput, TranslateResult, Transport, type TransportRequest, type TransportResponse, type TtsInput, type UpmetricsCostClientConfig, UpmetricsCostError, type UpmetricsCostRow, type UpmetricsCostSummary, type UpmetricsCostTimeseries, type UpmetricsSink, type UpmetricsSinkConfig, type UpmetricsSinkStats, Usage, VERSION, type VideoInput, type VisionInput, type VoiceInfo, type VoiceProvider, type VoiceResolveResult, type VoiceStatus, VoiceUnavailableError, type WebSearchContext, type WebSearchToolResult, ZDR_PROVIDERS, aiConfigSchema, anthropicAdapter, anthropicApiAdapter, anthropicSubprocessAdapter, azureAdapter, bflAdapter, bflCredits, byokAdapter, chatInputSchema, checkPriceDrift, checkVoice, computeCost, createAI, deepinfraAdapter, deeplAdapter, deepseekAdapter, defaultBaseUrl, defaultProviders, discordSink, elevenlabsAdapter, embeddingInputSchema, falAdapter, falStubAdapter, freshUsage, fromProviderToolCall, geminiAdapter, getCostSummary, getPrice, httpTransport, imageInputSchema, isByokKeyed, listAzureDanishVoices, listVoices, makeContracts, makeOpenAICompatibleAdapter, matchLabel, memorySearchCache, messageSchema, mistralAdapter, mistralStubAdapter, multiSink, noopSink, openaiAdapter, openaiStubAdapter, openrouterAdapter, parseClaudeCliJson, parseJsonLoose, refreshAvailability, requestyAdapter, resetRefreshState, resetRegistry, resolveAzureVoice, resolveTier, resolveVoice, routeSearch, runWebSearch, search, sqliteBudgetStore, sqliteSink, streamTransport, stubProviders, subprocessTransport, tierSpecSchema, toProviderTools, toolSchema, translateInputSchema, typesafeAdapter, upmetricsCostClient, upmetricsSink, usdFromMicro, vertexAdapter, visionInputSchema, webSearchTool, wouldProviderRouteTo, wouldRouteTo };
+export { AZURE_DANISH_VOICES, AZURE_DANISH_VOICE_LIST, type AiClient, type AiConfig, type AzureVoiceInfo, BatchJob, BatchRequestItem, BatchResultItem, type BflAdapterConfig, type BflCredits, BudgetConfig, BudgetExceededError, BudgetGuard, BudgetStore, CONFIG_DERIVED_HOSTS, Capability, type ChatInput, ChatResult, ChatStreamEvent, type CheckVoiceOptions, type ClassifyInput, type ClassifyResult, type Contracts, type CostQuery, CostSink, type CostSummary, type CostSummaryQuery, type CostTimeseriesQuery, DEFAULT_BASE_URLS, DEFAULT_SEARCH_ROUTES, DEFAULT_TIER_MAP, type DesignInput, type DesignResult, type DiscordSinkConfig, ELEVENLABS_DANISH_VOICES, type EmbeddingInput, EmbeddingResult, type ExtractInput, type ExtractResult, type FalAdapterConfig, type FixedHostProvider, type HttpResponse, INPUT_LIMITS, type ImageInput, ImageResult, type JudgeInput, JudgeResult, LOCALLY_PINNED_HOSTS, type MockupInput, type MockupResult, type ModerationInput, ModerationResult, type OcrInput, OcrResult, type OpenAICompatibleConfig, type PodcastInput, PodcastResult, type PriceDriftResult, type PriceDriftRow, type PricingEntry, ProviderAdapter, type RefreshOptions, type RefreshResult, Region, type RerankInput, type RerankResult, type RouteForecast, SDK_TAG, SEARCH_CACHE_TTL_MS, SEARCH_PRICE_USD, SearchBudgetExceededError, type SearchCache, type SearchCapStore, type SearchCredentials, type SearchItem, SearchKeyMissingError, type SearchOptions, type SearchProviderId, type SearchPurpose, type SearchRequest, type SearchResult, type SearchRoute, type SqliteBudgetStoreConfig, type SqliteSinkConfig, StreamHttpError, type SubprocessResponse, Tier, TierSpec, Tool, ToolCall, type TrainStyleInput, TrainStyleResult, type TranscribeInput, TranscribeResult, type TranslateInput, TranslateResult, Transport, type TransportRequest, type TransportResponse, type TtsInput, type UpmetricsCostClientConfig, UpmetricsCostError, type UpmetricsCostRow, type UpmetricsCostSummary, type UpmetricsCostTimeseries, type UpmetricsSink, type UpmetricsSinkConfig, type UpmetricsSinkStats, Usage, VERSION, type VideoInput, type VisionInput, type VoiceInfo, type VoiceProvider, type VoiceResolveResult, type VoiceStatus, VoiceUnavailableError, type WebSearchContext, type WebSearchToolResult, ZDR_PROVIDERS, aiConfigSchema, anthropicAdapter, anthropicApiAdapter, anthropicSubprocessAdapter, azureAdapter, bflAdapter, bflCredits, byokAdapter, chatInputSchema, checkPriceDrift, checkVoice, computeCost, createAI, deepinfraAdapter, deeplAdapter, deepseekAdapter, defaultBaseUrl, defaultProviders, discordSink, elevenlabsAdapter, embeddingInputSchema, falAdapter, falStubAdapter, freshUsage, fromProviderToolCall, geminiAdapter, getCostSummary, getPrice, httpTransport, imageInputSchema, isByokKeyed, listAzureDanishVoices, listVoices, makeContracts, makeOpenAICompatibleAdapter, matchLabel, memorySearchCache, messageSchema, mistralAdapter, mistralStubAdapter, multiSink, noopSink, openaiAdapter, openaiStubAdapter, openrouterAdapter, parseClaudeCliJson, parseJsonLoose, refreshAvailability, requestyAdapter, resetRefreshState, resetRegistry, resolveAzureVoice, resolveTier, resolveVoice, routeSearch, runWebSearch, search, sqliteBudgetStore, sqliteSink, streamTransport, stubProviders, subprocessTransport, tierSpecSchema, toProviderTools, toolSchema, translateInputSchema, typesafeAdapter, upmetricsCostClient, upmetricsSink, usdFromMicro, vertexAdapter, visionInputSchema, webSearchTool, wouldProviderRouteTo, wouldRouteTo };

package/dist/index.js

@@ -3716,6 +3716,23 @@ function checkVoice(requested, opts = {}) {
 
 // src/schema/inputs.ts
 import { z } from "zod";
+var INPUT_LIMITS = {
+  messages: 1e4,
+  contentParts: 1e3,
+  toolCalls: 1e3,
+  tools: 1e3,
+  fallback: 32,
+  loras: 32,
+  trainImages: 1e3,
+  texts: 1e4,
+  phrases: 1e4,
+  granularities: 10,
+  judgeEntryItems: 1e3,
+  stateItems: 1e4,
+  scriptLines: 1e4,
+  pronunciations: 1e4
+};
+var L = INPUT_LIMITS;
 var transportSchema = z.enum(["http", "subprocess"]);
 var tierSchema = z.enum([
   "fast",
@@ -3755,8 +3772,8 @@ var contentPartSchema = z.union([
 ]);
 var messageSchema = z.object({
   role: z.enum(["system", "user", "assistant", "tool"]),
-  content: z.union([z.string(), z.array(contentPartSchema)]),
-  toolCalls: z.array(toolCallSchema).optional(),
+  content: z.union([z.string(), z.array(contentPartSchema).max(L.contentParts)]),
+  toolCalls: z.array(toolCallSchema).max(L.toolCalls).optional(),
   toolCallId: z.string().optional(),
   /** F049 — see Message.prefix. Position/role validity is enforced in the adapter,
    *  not here: the rule is about a message's place in the ARRAY, which a per-message
@@ -3766,7 +3783,7 @@ var messageSchema = z.object({
 var callOptions = {
   tier: tierSchema.optional(),
   override: tierSpecSchema.partial().optional(),
-  fallback: z.array(z.union([tierSchema, tierSpecSchema])).optional(),
+  fallback: z.array(z.union([tierSchema, tierSpecSchema])).max(L.fallback).optional(),
   purpose: z.string().optional(),
   /** F077.3 — you MEAN to call a floating "-latest" id (no warning, no strictPinning error). */
   allowFloating: z.boolean().optional(),
@@ -3784,9 +3801,9 @@ var chatInputSchema = z.object({
    *  false opts out; an explicit promptCacheKey always wins. */
   promptCache: z.boolean().optional(),
   prompt: z.string().optional(),
-  messages: z.array(messageSchema).optional(),
+  messages: z.array(messageSchema).max(L.messages).optional(),
   system: z.string().optional(),
-  tools: z.array(toolSchema).optional(),
+  tools: z.array(toolSchema).max(L.tools).optional(),
   maxTokens: z.number().int().positive().optional(),
   temperature: z.number().min(0).max(2).optional(),
   /** F074.3 — Mistral reasoning ("thinking") before the answer. Large 4 thinks by
@@ -3828,7 +3845,7 @@ var imageInputSchema = z.object({
   width: z.number().int().positive().optional(),
   height: z.number().int().positive().optional(),
   /** LoRAs to merge at inference (F021). */
-  loras: z.array(loraWeightSchema).optional(),
+  loras: z.array(loraWeightSchema).max(L.loras).optional(),
   /** Shorthand for a single LoRA — normalized to loras:[{path, scale:1}]. */
   lora: z.string().optional(),
   /** F023 — a BFL finetune id (subject trained in the BFL dashboard). Routes to the
@@ -3866,7 +3883,7 @@ var animateInputSchema = z.object({
 });
 var trainStyleInputSchema = z.object({
   /** A hosted archive URL, or an array of image URLs the SDK zips in-memory. */
-  images: z.union([z.string(), z.array(z.string())]),
+  images: z.union([z.string(), z.array(z.string()).max(L.trainImages)]),
   /** Style LoRA (disables captioning/masks). Default true. */
   isStyle: z.boolean().optional(),
   triggerWord: z.string().optional(),
@@ -3875,7 +3892,7 @@ var trainStyleInputSchema = z.object({
   ...callOptions
 });
 var embeddingInputSchema = z.object({
-  text: z.union([z.string(), z.array(z.string())]),
+  text: z.union([z.string(), z.array(z.string()).max(L.texts)]),
   ...callOptions
 });
 var transcribeInputSchema = z.object({
@@ -3885,12 +3902,12 @@ var transcribeInputSchema = z.object({
   /** Audio length in seconds — enables Whisper per-minute cost. */
   durationSec: z.number().positive().optional(),
   /** Bias toward brand/jargon terms (Azure phraseList, F029.3); others ignore it. */
-  phrases: z.array(z.string()).optional(),
+  phrases: z.array(z.string()).max(L.phrases).optional(),
   /** Opt-in timestamps (F036) — a single granularity or an array. Omit → the
    *  current { text, usage } shape, unchanged. Pass ["word","segment"] for both.
    *  Supported by Whisper (openai) + Azure fast-transcription (F036.1); other
    *  adapters (Voxtral/mistral) ignore it and return text only. */
-  timestamps: z.union([z.enum(["word", "segment"]), z.array(z.enum(["word", "segment"]))]).optional(),
+  timestamps: z.union([z.enum(["word", "segment"]), z.array(z.enum(["word", "segment"])).max(L.granularities)]).optional(),
   ...callOptions
 });
 var ocrInputSchema = z.object({
@@ -3901,10 +3918,10 @@ var ocrInputSchema = z.object({
   ...callOptions
 });
 var moderationInputSchema = z.object({
-  input: z.union([z.string(), z.array(z.string())]),
+  input: z.union([z.string(), z.array(z.string()).max(L.texts)]),
   ...callOptions
 });
-var judgeEntrySchema = z.union([z.string().min(1), z.null(), z.array(z.unknown()), z.record(z.string(), z.unknown())]);
+var judgeEntrySchema = z.union([z.string().min(1), z.null(), z.array(z.unknown()).max(L.judgeEntryItems), z.record(z.string(), z.unknown())]);
 var judgeQuestionSchema = z.discriminatedUnion("type", [
   z.object({
     type: z.literal("noul"),
@@ -3929,7 +3946,7 @@ var judgeQuestionSchema = z.discriminatedUnion("type", [
   })
 ]);
 var judgeInputSchema = z.object({
-  state: z.union([z.string().min(1), z.array(z.string()), z.record(z.string(), z.unknown())]),
+  state: z.union([z.string().min(1), z.array(z.string()).max(L.stateItems), z.record(z.string(), z.unknown())]),
   questions: z.record(z.string(), judgeQuestionSchema).refine((q) => Object.keys(q).length > 0, {
     message: "judge needs at least one question"
   }),
@@ -3944,13 +3961,13 @@ var pronunciationSchema = z.object({
   matchInCompounds: z.boolean().optional()
 });
 var podcastInputSchema = z.object({
-  script: z.array(z.object({ speaker: z.string(), text: z.string() })).min(1),
+  script: z.array(z.object({ speaker: z.string(), text: z.string() })).min(1).max(L.scriptLines),
   voices: z.record(z.string(), z.string()),
   format: z.string().optional(),
   /** F051.4 — same field, same semantics as tts. Applied PER LINE: ElevenLabs'
    *  /text-to-dialogue takes inputs[].text separately, so there is no composed string
    *  a replacement could run across a speaker boundary in. */
-  pronunciations: z.array(pronunciationSchema).optional(),
+  pronunciations: z.array(pronunciationSchema).max(L.pronunciations).optional(),
   ...callOptions
 });
 var ttsInputSchema = z.object({
@@ -3958,7 +3975,7 @@ var ttsInputSchema = z.object({
   voice: z.string(),
   /** F051 — see TtsRequest.pronunciations. The alias/ipa exclusivity is enforced in
    *  the adapter, not here: the message must name the provider that cannot do it. */
-  pronunciations: z.array(pronunciationSchema).optional(),
+  pronunciations: z.array(pronunciationSchema).max(L.pronunciations).optional(),
   /** F055 — per-word timings (Azure only). Changes the route to batch synthesis. */
   wordTimings: z.boolean().optional(),
   /** F037: voice to use if `voice` is one we know the provider has retired. Without
@@ -3983,7 +4000,7 @@ var budgetSchema = z.object({
 });
 var availabilitySchema = z.object({
   autoResolve: z.boolean().optional(),
-  fallback: z.union([z.string(), z.array(z.string())]).optional()
+  fallback: z.union([z.string(), z.array(z.string()).max(L.fallback)]).optional()
 });
 var aiConfigSchema = z.object({
   /** F069.1 — customer-key mode. Every provider must be built with byokAdapter(), so no
@@ -4016,8 +4033,8 @@ var aiConfigSchema = z.object({
 import { randomUUID } from "crypto";
 
 // src/version.ts
-var VERSION = "0.66.0";
-var SDK_TAG = "@broberg/ai-sdk@0.66.0";
+var VERSION = "0.66.1";
+var SDK_TAG = "@broberg/ai-sdk@0.66.1";
 
 // src/cost/sinks/upmetrics.ts
 function isRetryableStatus(status) {
@@ -5572,6 +5589,7 @@ export {
   DEFAULT_SEARCH_ROUTES,
   DEFAULT_TIER_MAP,
   ELEVENLABS_DANISH_VOICES,
+  INPUT_LIMITS,
   LOCALLY_PINNED_HOSTS,
   MEDIA_PRICING_CHECKED_AT,
   ModelUnavailableError,