ai 6.0.206 → 6.0.208

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # ai
 
+## 6.0.208
+
+### Patch Changes
+
+- 8261640: fix(ai): handle partial unicode escapes in fixJson
+- f994df3: Serialize `undefined` tool output to `null` in UI message chunks
+
+## 6.0.207
+
+### Patch Changes
+
+- 779f5cd: fix(provider-utils): cancel response body on download rejection to prevent socket leak
+
+  When a download was rejected early — because the `Content-Length` header exceeded the size limit, the response status was not ok, or a redirect resolved to a blocked URL — the fetch response body was left unconsumed and uncancelled. With WHATWG Fetch/undici this leaves the underlying TCP socket open instead of returning it to the connection pool, allowing an attacker-controlled origin to exhaust file descriptors and cause a denial of service. The body is now cancelled on all early-rejection paths in `readResponseWithSizeLimit`, `download`, and `downloadBlob`, and `fetchWithValidatedRedirects` cancels each redirect hop's body before following or rejecting the next hop.
+
+- Updated dependencies [5bfde36]
+- Updated dependencies [779f5cd]
+  - @ai-sdk/gateway@3.0.133
+  - @ai-sdk/provider-utils@4.0.30
+
 ## 6.0.206
 
 ### Patch Changes

package/dist/index.js

@@ -1281,7 +1281,7 @@ function detectMediaType({
 var import_provider_utils3 = require("@ai-sdk/provider-utils");
 
 // src/version.ts
-var VERSION = true ? "6.0.206" : "0.0.0-test";
+var VERSION = true ? "6.0.208" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({
@@ -1303,6 +1303,7 @@ var download = async ({
       abortSignal
     });
     if (!response.ok) {
+      await (0, import_provider_utils3.cancelResponseBody)(response);
       throw new import_provider_utils3.DownloadError({
         url: urlText,
         statusCode: response.status,
@@ -3348,6 +3349,10 @@ function fixJson(input) {
   const stack = ["ROOT"];
   let lastValidIndex = -1;
   let literalStart = null;
+  let unicodeEscapeDigits = 0;
+  function isHexDigit(char) {
+    return char >= "0" && char <= "9" || char >= "A" && char <= "F" || char >= "a" && char <= "f";
+  }
   function processValueStart(char, i, swapState) {
     {
       switch (char) {
@@ -3552,7 +3557,22 @@ function fixJson(input) {
       }
       case "INSIDE_STRING_ESCAPE": {
         stack.pop();
-        lastValidIndex = i;
+        if (char === "u") {
+          unicodeEscapeDigits = 0;
+          stack.push("INSIDE_STRING_UNICODE_ESCAPE");
+        } else {
+          lastValidIndex = i;
+        }
+        break;
+      }
+      case "INSIDE_STRING_UNICODE_ESCAPE": {
+        if (isHexDigit(char)) {
+          unicodeEscapeDigits++;
+          if (unicodeEscapeDigits === 4) {
+            stack.pop();
+            lastValidIndex = i;
+          }
+        }
         break;
       }
       case "INSIDE_NUMBER": {
@@ -8435,7 +8455,9 @@ var DefaultStreamTextResult = class {
               controller.enqueue({
                 type: "tool-output-available",
                 toolCallId: part.toolCallId,
-                output: part.output,
+                // UI stream chunks are serialized as JSON, which drops undefined
+                // properties. Use null so tool outputs always keep the output field.
+                output: part.output === void 0 ? null : part.output,
                 ...part.providerExecuted != null ? { providerExecuted: part.providerExecuted } : {},
                 ...part.providerMetadata != null ? { providerMetadata: part.providerMetadata } : {},
                 ...part.toolMetadata != null ? { toolMetadata: part.toolMetadata } : {},