ai-gateway-proxy 0.5.0 → 0.6.0

package/README.md

@@ -155,7 +155,7 @@ The proxy gets a credential on every request with `getGatewayAuthToken()`, in th
 | `beforeRawRequest` | none | `({ kind, path, modelId, request }) => unknown`. Runs on the calls that are not language model calls; see below. |
 | `afterRawResponse` | none | `({ kind, path, modelId, request, response }) => Response \| undefined`. Runs on the response to those calls; see below. |
 
-Each hook may also return a promise. `beforeRequest`, `afterResponse` and `onError` are typed for language model calls, and every hook runs only for requests with a body. Their `modelId` is the client's `ai-language-model-id` header, such as `openai/gpt-5`, since the call body does not name the model; it is `undefined` when the request has no such header. A `GET` or `HEAD` request, such as the provider's `GET /config` model list, and any other request whose body is missing or empty, such as a bodyless `DELETE`, is forwarded without a body and without running any hook, and the upstream status and body come back unchanged, except that a redirect is answered with a 502 as below. A request body that neither `beforeRequest` nor `beforeRawRequest` receives is sent upstream as the client sent it; once either hook runs, the body it returns or leaves in place is serialised again.
+Each hook may also return a promise. `beforeRequest`, `afterResponse` and `onError` are typed for language model calls, and every hook runs only for requests with a body. Their `modelId` is the client's `ai-language-model-id` header, such as `openai/gpt-5`, since the call body does not name the model; it is `undefined` when the request has no such header. A `GET` or `HEAD` request, such as the provider's `GET /config` model list, and any other request whose body is missing or empty, such as a bodyless `DELETE`, is forwarded without a body and without running any hook, and the upstream status and body come back unchanged, except that a redirect is answered with a 502 and a gateway `authentication_error` is retyped as below. A request body that neither `beforeRequest` nor `beforeRawRequest` receives is sent upstream as the client sent it; once either hook runs, the body it returns or leaves in place is serialised again.
 
 Path matching fails closed: the language model hooks run on every request with a body except one whose path relative to `baseUrl` is exactly one of the paths `@ai-sdk/gateway` uses for calls that are not language model calls:
 
@@ -250,7 +250,7 @@ Apart from forwarding the gateway's own responses, the handler can answer with a
 | Status | Type | Message | When |
 | --- | --- | --- | --- |
 | 500 | `proxy_error` | `AI Gateway authentication not configured: set AI_GATEWAY_API_KEY or deploy on Vercel with OIDC enabled` | `getGatewayAuthToken()` returned `null`. The type is not `authentication_error`, which `@ai-sdk/gateway` replaces with advice about the client's own key. |
-| upstream, such as 401 | `proxy_error` | `AI Gateway rejected the proxy's credential: <message>` | The gateway answered a request with a body with an error typed `authentication_error`; see `onError` above. The other fields of the error are kept. |
+| upstream, such as 401 | `proxy_error` | `AI Gateway rejected the proxy's credential: <message>` | The gateway answered with an error typed `authentication_error`, for a call with a body or a bodyless one such as `GET /config`; see `onError` above. The other fields of the error are kept. |
 | 400 | `invalid_request_error` | `Invalid path` | The path is not a safe relative path under `baseUrl`. |
 | 400 | `invalid_request_error` | `Invalid JSON body` | A request other than `GET` or `HEAD` has a non-empty body that is not JSON. |
 | 400 | `invalid_request_error` | `Invalid request body: a language model call must be a JSON object` | The body is JSON but not an object, such as an array or `null`, on a path that runs `beforeRequest`, `afterResponse` or `onError`, and one of them is set. No hook runs and the gateway is not called. |

package/dist/index.cjs

@@ -515,6 +515,7 @@ const NULL_BODY_STATUS = new Set([
 const ANSWERED_CALL_FAILURE_STATUS = 424;
 // Successful bodies that are a sequence of values rather than one JSON value: event streams and JSON Lines.
 const STREAM_CONTENT_TYPE = /^\s*(?:text\/event-stream|application\/(?:x-ndjson|jsonl|jsonlines|x-jsonlines))\s*(?:;|$)/i;
+const JSON_CONTENT_TYPE = /^\s*application\/(?:[\w.+-]+\+)?json\s*(?:;|$)/i;
 /**
  * Extracts the path from the request using either a custom extractor or route params.
  */ async function extractPathFromRequest(request, context, options) {
@@ -652,11 +653,35 @@ function proxyFailureResponse(request, error) {
         if (isRedirect(res)) {
             return redirectRefusedResponse(res);
         }
-        return passThroughResponse(res);
+        return await bodylessUpstreamResponse(res);
     } catch (error) {
         return proxyFailureResponse(request, error);
     }
 }
+/**
+ * Passes a bodyless request's response through, except that a JSON error typed
+ * `authentication_error` is retyped as for a call with a body. Only JSON error bodies are read.
+ */ async function bodylessUpstreamResponse(res) {
+    const contentType = res.headers.get("content-type") ?? "application/json";
+    if (res.ok || !res.body || !JSON_CONTENT_TYPE.test(contentType)) {
+        return passThroughResponse(res);
+    }
+    const text = await res.text();
+    const parsed = parseJsonOrUndefined(text);
+    const body = isGatewayError(parsed) && parsed.error.type === "authentication_error" ? JSON.stringify(retypeProxyCredentialError(parsed)) : text;
+    return new Response(body, {
+        status: res.status,
+        statusText: res.statusText,
+        headers: responseHeaders(res, contentType)
+    });
+}
+function parseJsonOrUndefined(text) {
+    try {
+        return JSON.parse(text);
+    } catch  {
+        return undefined;
+    }
+}
 function isGatewayError(value) {
     if (typeof value !== "object" || value === null) {
         return false;

package/dist/index.mjs

@@ -513,6 +513,7 @@ const NULL_BODY_STATUS = new Set([
 const ANSWERED_CALL_FAILURE_STATUS = 424;
 // Successful bodies that are a sequence of values rather than one JSON value: event streams and JSON Lines.
 const STREAM_CONTENT_TYPE = /^\s*(?:text\/event-stream|application\/(?:x-ndjson|jsonl|jsonlines|x-jsonlines))\s*(?:;|$)/i;
+const JSON_CONTENT_TYPE = /^\s*application\/(?:[\w.+-]+\+)?json\s*(?:;|$)/i;
 /**
  * Extracts the path from the request using either a custom extractor or route params.
  */ async function extractPathFromRequest(request, context, options) {
@@ -650,11 +651,35 @@ function proxyFailureResponse(request, error) {
         if (isRedirect(res)) {
             return redirectRefusedResponse(res);
         }
-        return passThroughResponse(res);
+        return await bodylessUpstreamResponse(res);
     } catch (error) {
         return proxyFailureResponse(request, error);
     }
 }
+/**
+ * Passes a bodyless request's response through, except that a JSON error typed
+ * `authentication_error` is retyped as for a call with a body. Only JSON error bodies are read.
+ */ async function bodylessUpstreamResponse(res) {
+    const contentType = res.headers.get("content-type") ?? "application/json";
+    if (res.ok || !res.body || !JSON_CONTENT_TYPE.test(contentType)) {
+        return passThroughResponse(res);
+    }
+    const text = await res.text();
+    const parsed = parseJsonOrUndefined(text);
+    const body = isGatewayError(parsed) && parsed.error.type === "authentication_error" ? JSON.stringify(retypeProxyCredentialError(parsed)) : text;
+    return new Response(body, {
+        status: res.status,
+        statusText: res.statusText,
+        headers: responseHeaders(res, contentType)
+    });
+}
+function parseJsonOrUndefined(text) {
+    try {
+        return JSON.parse(text);
+    } catch  {
+        return undefined;
+    }
+}
 function isGatewayError(value) {
     if (typeof value !== "object" || value === null) {
         return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-gateway-proxy",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",