@broberg/ai-sdk 0.50.0 → 0.51.0

package/dist/index.d.ts

@@ -2425,6 +2425,9 @@ declare const ttsInputSchema: z.ZodObject<{
     rate?: number | undefined;
 }>;
 declare const aiConfigSchema: z.ZodObject<{
+    /** F069.1 — customer-key mode. Every provider must be built with byokAdapter(), so no
+     *  call can fall back to the fleet's env keys; createAI throws at setup otherwise. */
+    byok: z.ZodOptional<z.ZodBoolean>;
     /** F039.2 — client-wide opt-out from prompt caching (default: on where the
      *  provider supports it). A per-call `promptCache` wins over this. */
     promptCache: z.ZodOptional<z.ZodBoolean>;
@@ -2468,6 +2471,7 @@ declare const aiConfigSchema: z.ZodObject<{
     }>>;
 }, "strip", z.ZodTypeAny, {
     promptCache?: boolean | undefined;
+    byok?: boolean | undefined;
     defaults?: Partial<Record<"fast" | "smart" | "powerful" | "cheap" | "vision" | "video" | "embedding", {
         provider: string;
         model: string;
@@ -2485,6 +2489,7 @@ declare const aiConfigSchema: z.ZodObject<{
     } | undefined;
 }, {
     promptCache?: boolean | undefined;
+    byok?: boolean | undefined;
     defaults?: Partial<Record<"fast" | "smart" | "powerful" | "cheap" | "vision" | "video" | "embedding", {
         provider: string;
         model: string;
@@ -2836,6 +2841,19 @@ interface OpenAICompatibleConfig {
 }
 declare function makeOpenAICompatibleAdapter(config: OpenAICompatibleConfig): ProviderAdapter;
 
+/** The key-carrying fields an adapter config may hold. `credentials` is Vertex's
+ *  service-account JSON; every other adapter takes `apiKey`. */
+interface KeyedConfig {
+    apiKey?: string;
+    credentials?: string;
+}
+/** Build an adapter that is guaranteed to use the key you pass and never the fleet's
+ *  env key. Throws at construction when the key is missing or blank — a blank string
+ *  is not a key, and treating it as one would only move the failure to a 401 later. */
+declare function byokAdapter<C extends KeyedConfig>(factory: (config: C) => ProviderAdapter, config: C): ProviderAdapter;
+/** True when the adapter was built by byokAdapter with a real key. */
+declare function isByokKeyed(adapter: ProviderAdapter): boolean;
+
 declare const defaultProviders: Record<string, ProviderAdapter>;
 
 /** Anthropic adapter stub (HTTP path). */
@@ -2854,8 +2872,8 @@ declare const falStubAdapter: ProviderAdapter;
  *  wires the live adapters. */
 declare const stubProviders: Record<string, ProviderAdapter>;
 
-declare const VERSION: "0.50.0";
-declare const SDK_TAG: "@broberg/ai-sdk@0.50.0";
+declare const VERSION: "0.51.0";
+declare const SDK_TAG: "@broberg/ai-sdk@0.51.0";
 
 /** Built-in defaults. Every entry is overridable via AiConfig.defaults or a
  *  per-call override.
@@ -3366,4 +3384,4 @@ interface StreamTransportRequest extends TransportRequest {
  */
 declare function streamTransport(req: StreamTransportRequest): AsyncIterable<string>;
 
-export { AZURE_DANISH_VOICES, AZURE_DANISH_VOICE_LIST, type AiClient, type AiConfig, type AlignedWordTimings, type AzureVoiceInfo, type AzureWordBoundary, type BatchJob, type BatchRequestItem, type BatchResultItem, type BflAdapterConfig, type BflCredits, type BudgetConfig, BudgetExceededError, BudgetGuard, type BudgetStore, CONFIG_DERIVED_HOSTS, type CallOptions, type Capability, type ChatInput, type ChatRequest, type ChatResult, type ChatStreamEvent, type CheckVoiceOptions, type ClassifyInput, type ClassifyResult, type ContentPart, type Contracts, type CostQuery, type CostSink, type CostSummary, type CostSummaryQuery, type CostTimeseriesQuery, DEFAULT_BASE_URLS, DEFAULT_TIER_MAP, type DesignInput, type DesignResult, type DialogueRequest, type DialogueTurn, type DiscordSinkConfig, ELEVENLABS_DANISH_VOICES, type EmbeddingInput, type EmbeddingRequest, type EmbeddingResult, type ExtractInput, type ExtractResult, type FalAdapterConfig, type FixedHostProvider, type HttpResponse, type ImageInput, type ImageRequest, type ImageResult, type JudgeAnswer, type JudgeChoiceAnswer, type JudgeInput, type JudgeNoulAnswer, type JudgeQuestion, type JudgeResult, type JudgeScoreAnswer, LOCALLY_PINNED_HOSTS, type LoraWeight, type Message, type MockupInput, type MockupResult, type ModerationInput, type ModerationItem, type ModerationRequest, type ModerationResult, type OcrInput, type OcrPage, type OcrRequest, type OcrResult, type OpenAICompatibleConfig, type PodcastInput, type PodcastResult, type PricingEntry, type ProviderAdapter, type RefreshOptions, type RefreshResult, type Region, type RerankInput, type RerankResult, type Role, type RouteForecast, SDK_TAG, type SqliteBudgetStoreConfig, type SqliteSinkConfig, StreamHttpError, type SubprocessResponse, type Tier, type TierSpec, type Tool, type ToolCall, type TrainStyleInput, type TrainStyleRequest, type TrainStyleResult, type TranscribeInput, type TranscribeRequest, type TranscribeResult, type TranslateInput, type TranslateResult, type Transport, type TransportRequest, type TransportResponse, type TtsInput, type TtsRequest, type UpmetricsCostClientConfig, UpmetricsCostError, type UpmetricsCostRow, type UpmetricsCostSummary, type UpmetricsCostTimeseries, type UpmetricsSink, type UpmetricsSinkConfig, type UpmetricsSinkStats, type Usage, VERSION, type VideoInput, type VisionInput, type VoiceInfo, type VoiceProvider, type VoiceResolveResult, type VoiceStatus, VoiceUnavailableError, type WordTiming, aiConfigSchema, alignWordTimings, anthropicAdapter, anthropicApiAdapter, anthropicSubprocessAdapter, azureAdapter, bflAdapter, bflCredits, chatInputSchema, checkVoice, classifyRegionName, computeCost, createAI, deepinfraAdapter, deeplAdapter, deepseekAdapter, defaultBaseUrl, defaultProviders, discordSink, elevenlabsAdapter, embeddingInputSchema, falAdapter, falStubAdapter, freshUsage, fromProviderToolCall, geminiAdapter, getCostSummary, getPrice, httpTransport, imageInputSchema, listAzureDanishVoices, listVoices, makeContracts, makeOpenAICompatibleAdapter, matchLabel, messageSchema, mistralAdapter, mistralStubAdapter, multiSink, noopSink, openaiAdapter, openaiStubAdapter, openrouterAdapter, parseClaudeCliJson, parseJsonLoose, refreshAvailability, regionOfHost, regionOfProvider, requestyAdapter, resetRefreshState, resetRegistry, resolveAzureVoice, resolveTier, resolveVoice, sqliteBudgetStore, sqliteSink, streamTransport, stubProviders, subprocessTransport, tierSpecSchema, toProviderTools, toolSchema, translateInputSchema, typesafeAdapter, upmetricsCostClient, upmetricsSink, usdFromMicro, vertexAdapter, visionInputSchema, wouldProviderRouteTo, wouldRouteTo };
+export { AZURE_DANISH_VOICES, AZURE_DANISH_VOICE_LIST, type AiClient, type AiConfig, type AlignedWordTimings, type AzureVoiceInfo, type AzureWordBoundary, type BatchJob, type BatchRequestItem, type BatchResultItem, type BflAdapterConfig, type BflCredits, type BudgetConfig, BudgetExceededError, BudgetGuard, type BudgetStore, CONFIG_DERIVED_HOSTS, type CallOptions, type Capability, type ChatInput, type ChatRequest, type ChatResult, type ChatStreamEvent, type CheckVoiceOptions, type ClassifyInput, type ClassifyResult, type ContentPart, type Contracts, type CostQuery, type CostSink, type CostSummary, type CostSummaryQuery, type CostTimeseriesQuery, DEFAULT_BASE_URLS, DEFAULT_TIER_MAP, type DesignInput, type DesignResult, type DialogueRequest, type DialogueTurn, type DiscordSinkConfig, ELEVENLABS_DANISH_VOICES, type EmbeddingInput, type EmbeddingRequest, type EmbeddingResult, type ExtractInput, type ExtractResult, type FalAdapterConfig, type FixedHostProvider, type HttpResponse, type ImageInput, type ImageRequest, type ImageResult, type JudgeAnswer, type JudgeChoiceAnswer, type JudgeInput, type JudgeNoulAnswer, type JudgeQuestion, type JudgeResult, type JudgeScoreAnswer, LOCALLY_PINNED_HOSTS, type LoraWeight, type Message, type MockupInput, type MockupResult, type ModerationInput, type ModerationItem, type ModerationRequest, type ModerationResult, type OcrInput, type OcrPage, type OcrRequest, type OcrResult, type OpenAICompatibleConfig, type PodcastInput, type PodcastResult, type PricingEntry, type ProviderAdapter, type RefreshOptions, type RefreshResult, type Region, type RerankInput, type RerankResult, type Role, type RouteForecast, SDK_TAG, type SqliteBudgetStoreConfig, type SqliteSinkConfig, StreamHttpError, type SubprocessResponse, type Tier, type TierSpec, type Tool, type ToolCall, type TrainStyleInput, type TrainStyleRequest, type TrainStyleResult, type TranscribeInput, type TranscribeRequest, type TranscribeResult, type TranslateInput, type TranslateResult, type Transport, type TransportRequest, type TransportResponse, type TtsInput, type TtsRequest, type UpmetricsCostClientConfig, UpmetricsCostError, type UpmetricsCostRow, type UpmetricsCostSummary, type UpmetricsCostTimeseries, type UpmetricsSink, type UpmetricsSinkConfig, type UpmetricsSinkStats, type Usage, VERSION, type VideoInput, type VisionInput, type VoiceInfo, type VoiceProvider, type VoiceResolveResult, type VoiceStatus, VoiceUnavailableError, type WordTiming, aiConfigSchema, alignWordTimings, anthropicAdapter, anthropicApiAdapter, anthropicSubprocessAdapter, azureAdapter, bflAdapter, bflCredits, byokAdapter, chatInputSchema, checkVoice, classifyRegionName, computeCost, createAI, deepinfraAdapter, deeplAdapter, deepseekAdapter, defaultBaseUrl, defaultProviders, discordSink, elevenlabsAdapter, embeddingInputSchema, falAdapter, falStubAdapter, freshUsage, fromProviderToolCall, geminiAdapter, getCostSummary, getPrice, httpTransport, imageInputSchema, isByokKeyed, listAzureDanishVoices, listVoices, makeContracts, makeOpenAICompatibleAdapter, matchLabel, messageSchema, mistralAdapter, mistralStubAdapter, multiSink, noopSink, openaiAdapter, openaiStubAdapter, openrouterAdapter, parseClaudeCliJson, parseJsonLoose, refreshAvailability, regionOfHost, regionOfProvider, requestyAdapter, resetRefreshState, resetRegistry, resolveAzureVoice, resolveTier, resolveVoice, sqliteBudgetStore, sqliteSink, streamTransport, stubProviders, subprocessTransport, tierSpecSchema, toProviderTools, toolSchema, translateInputSchema, typesafeAdapter, upmetricsCostClient, upmetricsSink, usdFromMicro, vertexAdapter, visionInputSchema, wouldProviderRouteTo, wouldRouteTo };

package/dist/index.js

@@ -18,7 +18,7 @@ import {
   listMediaPrices,
   pricingFreshness,
   pricingGeneratedAt
-} from "./chunk-NHU5FWKT.js";
+} from "./chunk-O4LR6X4U.js";
 
 // src/cost/default-hosts.ts
 var DEFAULT_BASE_URLS = {
@@ -3495,6 +3495,9 @@ var availabilitySchema = z.object({
   fallback: z.union([z.string(), z.array(z.string())]).optional()
 });
 var aiConfigSchema = z.object({
+  /** F069.1 — customer-key mode. Every provider must be built with byokAdapter(), so no
+   *  call can fall back to the fleet's env keys; createAI throws at setup otherwise. */
+  byok: z.boolean().optional(),
   /** F039.2 — client-wide opt-out from prompt caching (default: on where the
    *  provider supports it). A per-call `promptCache` wins over this. */
   promptCache: z.boolean().optional(),
@@ -3514,8 +3517,8 @@ var aiConfigSchema = z.object({
 import { randomUUID } from "crypto";
 
 // src/version.ts
-var VERSION = "0.50.0";
-var SDK_TAG = "@broberg/ai-sdk@0.50.0";
+var VERSION = "0.51.0";
+var SDK_TAG = "@broberg/ai-sdk@0.51.0";
 
 // src/cost/sinks/upmetrics.ts
 function isRetryableStatus(status) {
@@ -3709,6 +3712,36 @@ function upmetricsSink(config) {
   };
 }
 
+// src/byok.ts
+var BYOK_KEYED = /* @__PURE__ */ Symbol.for("@broberg/ai-sdk/byok-keyed");
+function byokAdapter(factory, config) {
+  const key = config.apiKey ?? config.credentials;
+  if (typeof key !== "string" || key.trim() === "") {
+    throw new Error(
+      "byokAdapter: no customer key (apiKey/credentials is missing or blank). Refusing to build an adapter that would fall back to the fleet's env key."
+    );
+  }
+  const adapter = factory(config);
+  Object.defineProperty(adapter, BYOK_KEYED, { value: true, enumerable: false });
+  return adapter;
+}
+function isByokKeyed(adapter) {
+  return adapter[BYOK_KEYED] === true;
+}
+function assertByokProviders(providers) {
+  if (!providers || Object.keys(providers).length === 0) {
+    throw new Error(
+      "createAI({ byok: true }) needs `providers` built with byokAdapter \u2014 without them the fleet's default adapters (and the fleet's keys) would be used."
+    );
+  }
+  const unkeyed = Object.entries(providers).filter(([, a]) => !isByokKeyed(a)).map(([name]) => name);
+  if (unkeyed.length > 0) {
+    throw new Error(
+      `createAI({ byok: true }): provider(s) ${unkeyed.join(", ")} were not built with byokAdapter, so they may read the fleet's env key. Build each one as byokAdapter(openaiAdapter, { apiKey }).`
+    );
+  }
+}
+
 // src/client.ts
 var DEFAULT_IMAGE_SPEC = {
   provider: "fal",
@@ -3764,6 +3797,7 @@ function defaultCostSink() {
 }
 function createAI(config = {}) {
   const cfg = aiConfigSchema.parse(config);
+  if (cfg.byok) assertByokProviders(cfg.providers);
   const providers = cfg.providers ?? defaultProviders;
   const costSink = cfg.costSink === void 0 ? defaultCostSink() : cfg.costSink ?? void 0;
   const budget = cfg.budget ? new BudgetGuard(cfg.budget) : void 0;
@@ -4714,6 +4748,7 @@ export {
   azureAdapter,
   bflAdapter,
   bflCredits,
+  byokAdapter,
   chatInputSchema,
   checkVoice,
   classifyRegionName,
@@ -4737,6 +4772,7 @@ export {
   getPrice,
   httpTransport,
   imageInputSchema,
+  isByokKeyed,
   listAzureDanishVoices,
   listMediaPrices,
   listModels,