fix(provider-usage): bound usage JSON response reads to prevent OOM

cxbAsDev · claude · cxbAsDev · commit 1f1c87e6fcbd · 2026-06-29T09:29:26.000+08:00
Replace unbounded response.json() with readProviderJsonResponse in
readUsageJson to cap provider usage API response bodies at 16 MiB,
preventing unbounded buffering from all seven providers (claude,
gemini, codex, z.ai, deepseek, minimax, and openai-compatible).

Co-Authored-By: Claude &lt;noreply@anthropic.com&gt;
diff --git a/src/infra/provider-usage.fetch.shared.ts b/src/infra/provider-usage.fetch.shared.ts
@@ -1,5 +1,6 @@
 // Shared fetch and parsing helpers for provider usage endpoints.
 import { resolveTimerTimeoutMs } from "@openclaw/normalization-core/number-coercion";
+import { readProviderJsonResponse } from "../agents/provider-http-errors.js";
 import { parseFiniteNumber as parseFiniteNumberish } from "./parse-finite-number.js";
 import { PROVIDER_LABELS } from "./provider-usage.shared.js";
 import type { ProviderUsageSnapshot, UsageProviderId } from "./provider-usage.types.js";
@@ -67,7 +68,8 @@ export async function readUsageJson(
   response: Response,
 ): Promise<{ ok: true; data: unknown } | { ok: false; snapshot: ProviderUsageSnapshot }> {
   try {
-    return { ok: true, data: await response.json() };
+    const data = await readProviderJsonResponse<unknown>(response, `${provider} usage`);
+    return { ok: true, data };
   } catch {
     return {
       ok: false,
