fix(openrouter): bound video model catalog JSON response reads

hugenshen · cursoragent · hugenshen · commit b6bef5f07800 · 2026-06-25T00:38:47.000+08:00
The video model catalog endpoint used an unbounded await response.json()
to parse the OpenRouter video models list. Route through
readProviderJsonResponse (16 MiB cap) to match the bound already in
place for the chat/text model catalog paths.

AI-assisted.

Co-authored-by: Cursor &lt;cursoragent@cursor.com&gt;
diff --git a/extensions/openrouter/video-model-catalog.ts b/extensions/openrouter/video-model-catalog.ts
@@ -7,6 +7,7 @@ import { resolveApiKeyForProvider } from "openclaw/plugin-sdk/provider-auth-runt
 import { getCachedLiveCatalogValue } from "openclaw/plugin-sdk/provider-catalog-shared";
 import {
   assertOkOrThrowHttpError,
+  readProviderJsonResponse,
   resolveProviderHttpRequestConfig,
 } from "openclaw/plugin-sdk/provider-http";
 import {
@@ -234,7 +235,10 @@ async function fetchOpenRouterVideoModels(params: {
       });
       try {
         await assertOkOrThrowHttpError(response, "OpenRouter video models request failed");
-        return (await response.json()) as OpenRouterVideoModelsResponse;
+        return await readProviderJsonResponse<OpenRouterVideoModelsResponse>(
+          response,
+          "openrouter.video-model-catalog",
+        );
       } finally {
         await release();
       }
