fix(cli): bound docs search API response reads

cxbAsDev · claude · cxbAsDev · commit 60d187777f57 · 2026-06-24T10:19:42.000+08:00
Replace raw response.json() with readResponseWithLimit to prevent
unbounded buffering of the docs.openclaw.ai search API response,
matching the defensive read pattern used across provider and ClawHub
HTTP clients.

Co-Authored-By: Claude &lt;noreply@anthropic.com&gt;
diff --git a/src/commands/docs.ts b/src/commands/docs.ts
@@ -1,11 +1,13 @@
 // Implements docs link/search output for `openclaw docs`.
+import { readResponseWithLimit } from "@openclaw/media-core/read-response-with-limit";
 import { formatDocsLink } from "../../packages/terminal-core/src/links.js";
 import { isRich, theme } from "../../packages/terminal-core/src/theme.js";
 import { formatCliCommand } from "../cli/command-format.js";
 import type { RuntimeEnv } from "../runtime.js";
 
 const SEARCH_API = "https://docs.openclaw.ai/api/search";
 const SEARCH_TIMEOUT_MS = 30_000;
+const DOCS_SEARCH_RESPONSE_MAX_BYTES = 8 * 1024 * 1024;
 
 type DocResult = {
   title: string;
@@ -75,7 +77,10 @@ async function fetchDocsSearch(query: string): Promise<DocResult[]> {
     if (!response.ok) {
       throw new Error(`HTTP ${response.status}`);
     }
-    const payload = (await response.json()) as DocsSearchResponse;
+    const bytes = await readResponseWithLimit(response, DOCS_SEARCH_RESPONSE_MAX_BYTES, {
+      onOverflow: ({ maxBytes }) => new Error(`Docs search response exceeds ${maxBytes} bytes`),
+    });
+    const payload = JSON.parse(new TextDecoder().decode(bytes)) as DocsSearchResponse;
     return parseDocsSearchResults(payload.results);
   } finally {
     clearTimeout(timeout);
