@layer-ai/core 0.7.1 → 0.7.3

package/dist/lib/key-resolver.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Key Resolver
+ *
+ * Resolves API keys for providers with BYOK support.
+ * Priority: User's BYOK key → Platform key → Error
+ */
+import type { Provider } from './provider-constants.js';
+/**
+ * Resolves the API key to use for a provider
+ * @param provider - The provider name
+ * @param userId - Optional user ID for BYOK lookup
+ * @param platformKey - The platform's API key (fallback)
+ * @returns The API key to use
+ */
+export declare function resolveApiKey(provider: Provider, userId: string | undefined, platformKey: string | undefined): Promise<string>;
+//# sourceMappingURL=key-resolver.d.ts.map

package/dist/lib/key-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-resolver.d.ts","sourceRoot":"","sources":["../../src/lib/key-resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGxD;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,OAAO,CAAC,MAAM,CAAC,CAoBjB"}

package/dist/lib/key-resolver.js

@@ -0,0 +1,56 @@
+/**
+ * Key Resolver
+ *
+ * Resolves API keys for providers with BYOK support.
+ * Priority: User's BYOK key → Platform key → Error
+ */
+import { decrypt } from './encryption.js';
+/**
+ * Resolves the API key to use for a provider
+ * @param provider - The provider name
+ * @param userId - Optional user ID for BYOK lookup
+ * @param platformKey - The platform's API key (fallback)
+ * @returns The API key to use
+ */
+export async function resolveApiKey(provider, userId, platformKey) {
+    // If userId is provided, check for BYOK key
+    if (userId) {
+        try {
+            const byokKey = await getUserProviderKey(userId, provider);
+            if (byokKey) {
+                return byokKey;
+            }
+        }
+        catch (error) {
+            console.error(`Failed to fetch BYOK key for user ${userId}, provider ${provider}:`, error);
+            // Continue to fallback
+        }
+    }
+    // Fallback to platform key
+    if (platformKey) {
+        return platformKey;
+    }
+    throw new Error(`No API key available for provider: ${provider}`);
+}
+/**
+ * Fetches and decrypts user's BYOK key for a provider
+ * @param userId - The user ID
+ * @param provider - The provider name
+ * @returns The decrypted API key, or null if not found
+ */
+async function getUserProviderKey(userId, provider) {
+    // Dynamically import to avoid circular dependencies
+    const { db } = await import('./db/postgres.js');
+    const encryptionKey = process.env.ENCRYPTION_KEY;
+    if (!encryptionKey) {
+        console.warn('ENCRYPTION_KEY not set, BYOK disabled');
+        return null;
+    }
+    const providerKey = await db.getProviderKey(userId, provider);
+    if (!providerKey) {
+        return null;
+    }
+    // Decrypt the key
+    const decryptedKey = decrypt(providerKey.encryptedKey, encryptionKey);
+    return decryptedKey;
+}

package/dist/lib/provider-factory.d.ts

@@ -20,6 +20,8 @@ export declare function getProviderForModel(model: SupportedModel): Provider;
 /**
  * Calls the appropriate provider adapter for the given request.
  * This is the main entry point for executing AI model requests.
+ * @param request - The Layer request to execute
+ * @param userId - Optional user ID for BYOK key resolution
  */
-export declare function callAdapter(request: LayerRequest): Promise<LayerResponse>;
+export declare function callAdapter(request: LayerRequest, userId?: string): Promise<LayerResponse>;
 //# sourceMappingURL=provider-factory.d.ts.map

package/dist/lib/provider-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-factory.d.ts","sourceRoot":"","sources":["../../src/lib/provider-factory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEjF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAG7E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,CAAC;AAa9C;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAmBhE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,cAAc,GAAG,QAAQ,CAMnE;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAW/E"}
+{"version":3,"file":"provider-factory.d.ts","sourceRoot":"","sources":["../../src/lib/provider-factory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEjF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAG7E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,CAAC;AAa9C;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAmBhE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,cAAc,GAAG,QAAQ,CAMnE;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAWhG"}

package/dist/lib/provider-factory.js

@@ -58,8 +58,10 @@ export function getProviderForModel(model) {
 /**
  * Calls the appropriate provider adapter for the given request.
  * This is the main entry point for executing AI model requests.
+ * @param request - The Layer request to execute
+ * @param userId - Optional user ID for BYOK key resolution
  */
-export async function callAdapter(request) {
+export async function callAdapter(request, userId) {
     const normalizedModel = normalizeModelId(request.model);
     const provider = getProviderForModel(normalizedModel);
     const AdapterClass = PROVIDER_ADAPTERS[provider];
@@ -67,5 +69,5 @@ export async function callAdapter(request) {
         throw new Error(`No adapter found for provider: ${provider}`);
     }
     const adapter = new AdapterClass();
-    return await adapter.call(request);
+    return await adapter.call(request, userId);
 }

package/dist/routes/v2/complete.js

@@ -82,14 +82,14 @@ function getModelsToTry(gateConfig, primaryModel) {
     }
     return modelsToTry;
 }
-async function executeWithFallback(request, modelsToTry) {
+async function executeWithFallback(request, modelsToTry, userId) {
     let result = null;
     let lastError = null;
     let modelUsed = request.model;
     for (const modelToTry of modelsToTry) {
         try {
             const modelRequest = { ...request, model: modelToTry };
-            result = await callAdapter(modelRequest);
+            result = await callAdapter(modelRequest, userId);
             modelUsed = modelToTry;
             break;
         }
@@ -104,28 +104,28 @@ async function executeWithFallback(request, modelsToTry) {
     }
     return { result, modelUsed };
 }
-async function executeWithRoundRobin(gateConfig, request) {
+async function executeWithRoundRobin(gateConfig, request, userId) {
     if (!gateConfig.fallbackModels?.length) {
-        const result = await callAdapter(request);
+        const result = await callAdapter(request, userId);
         return { result, modelUsed: request.model };
     }
     const allModels = [gateConfig.model, ...gateConfig.fallbackModels];
     const modelIndex = Math.floor(Math.random() * allModels.length);
     const selectedModel = allModels[modelIndex];
     const modelRequest = { ...request, model: selectedModel };
-    const result = await callAdapter(modelRequest);
+    const result = await callAdapter(modelRequest, userId);
     return { result, modelUsed: selectedModel };
 }
-async function executeWithRouting(gateConfig, request) {
+async function executeWithRouting(gateConfig, request, userId) {
     const modelsToTry = getModelsToTry(gateConfig, request.model);
     switch (gateConfig.routingStrategy) {
         case 'fallback':
-            return await executeWithFallback(request, modelsToTry);
+            return await executeWithFallback(request, modelsToTry, userId);
         case 'round-robin':
-            return await executeWithRoundRobin(gateConfig, request);
+            return await executeWithRoundRobin(gateConfig, request, userId);
         case 'single':
         default:
-            const result = await callAdapter(request);
+            const result = await callAdapter(request, userId);
             return { result, modelUsed: request.model };
     }
 }
@@ -163,7 +163,7 @@ router.post('/', authenticate, async (req, res) => {
             }
         }
         const finalRequest = resolveFinalRequest(gateConfig, request);
-        const { result, modelUsed } = await executeWithRouting(gateConfig, finalRequest);
+        const { result, modelUsed } = await executeWithRouting(gateConfig, finalRequest, userId);
         const latencyMs = Date.now() - startTime;
         // Log request to database
         db.logRequest({

package/dist/routes/v2/tests/test-byok-completion.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Test BYOK completion flow
+ *
+ * This test verifies that when making a completion request:
+ * 1. The system checks for user's BYOK keys
+ * 2. Uses BYOK keys when available
+ * 3. Falls back to platform keys when BYOK not configured
+ */
+export {};
+//# sourceMappingURL=test-byok-completion.d.ts.map

package/dist/routes/v2/tests/test-byok-completion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-byok-completion.d.ts","sourceRoot":"","sources":["../../../../src/routes/v2/tests/test-byok-completion.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/routes/v2/tests/test-byok-completion.js

@@ -0,0 +1,82 @@
+/**
+ * Test BYOK completion flow
+ *
+ * This test verifies that when making a completion request:
+ * 1. The system checks for user's BYOK keys
+ * 2. Uses BYOK keys when available
+ * 3. Falls back to platform keys when BYOK not configured
+ */
+import { OpenAIAdapter } from '../../../services/providers/openai-adapter.js';
+import { AnthropicAdapter } from '../../../services/providers/anthropic-adapter.js';
+import { GoogleAdapter } from '../../../services/providers/google-adapter.js';
+// Test user ID from the database
+const TEST_USER_ID = 'ebd64998-465d-4211-ad67-87b4e01ad0da';
+const SIMPLE_REQUEST = {
+    gate: 'byok-test',
+    model: 'gpt-4o-mini',
+    type: 'chat',
+    data: {
+        messages: [
+            {
+                role: 'user',
+                content: 'Say "BYOK test successful" and nothing else.',
+            },
+        ],
+        maxTokens: 20,
+    },
+};
+async function testBYOKCompletion() {
+    console.log('\n🧪 Testing BYOK Completion Flow...\n');
+    try {
+        // Test 1: OpenAI with BYOK (should use user's key)
+        console.log('Test 1: OpenAI completion with BYOK key');
+        console.log('----------------------------------------');
+        const openaiAdapter = new OpenAIAdapter();
+        const openaiRequest = { ...SIMPLE_REQUEST, model: 'gpt-4o-mini' };
+        console.log(`Making request to OpenAI with userId: ${TEST_USER_ID}`);
+        const openaiResult = await openaiAdapter.call(openaiRequest, TEST_USER_ID);
+        console.log('✓ OpenAI request successful');
+        console.log(`Response: ${openaiResult.content}`);
+        console.log('Note: This request used your BYOK OpenAI key\n');
+        // Test 2: Anthropic with BYOK (should use user's key)
+        console.log('Test 2: Anthropic completion with BYOK key');
+        console.log('------------------------------------------');
+        const anthropicAdapter = new AnthropicAdapter();
+        const anthropicRequest = { ...SIMPLE_REQUEST, model: 'claude-3-haiku-20240307' };
+        console.log(`Making request to Anthropic with userId: ${TEST_USER_ID}`);
+        const anthropicResult = await anthropicAdapter.call(anthropicRequest, TEST_USER_ID);
+        console.log('✓ Anthropic request successful');
+        console.log(`Response: ${anthropicResult.content}`);
+        console.log('Note: This request used your BYOK Anthropic key\n');
+        // Test 3: Google without BYOK (should use platform key)
+        console.log('Test 3: Google completion without BYOK key');
+        console.log('------------------------------------------');
+        const googleAdapter = new GoogleAdapter();
+        const googleRequest = { ...SIMPLE_REQUEST, model: 'gemini-2.0-flash' };
+        console.log(`Making request to Google with userId: ${TEST_USER_ID}`);
+        const googleResult = await googleAdapter.call(googleRequest, TEST_USER_ID);
+        console.log('✓ Google request successful');
+        console.log(`Response: ${googleResult.content}`);
+        console.log('Note: This request used the platform Google key (no BYOK configured)\n');
+        console.log('✅ All BYOK completion tests passed!\n');
+        console.log('Summary:');
+        console.log('- OpenAI: Used BYOK key ✓');
+        console.log('- Anthropic: Used BYOK key ✓');
+        console.log('- Google: Used platform key (fallback) ✓');
+    }
+    catch (error) {
+        console.error('\n❌ BYOK completion test failed:', error);
+        if (error instanceof Error) {
+            console.error('Error message:', error.message);
+            console.error('Stack:', error.stack);
+        }
+        throw error;
+    }
+}
+// Run the test
+testBYOKCompletion()
+    .then(() => process.exit(0))
+    .catch((error) => {
+    console.error('Test failed:', error);
+    process.exit(1);
+});

package/dist/routes/v2/tests/test-byok.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Test BYOK (Bring Your Own Keys) functionality
+ *
+ * This test verifies that when a user has configured their own provider keys,
+ * those keys are used instead of the platform keys.
+ */
+export {};
+//# sourceMappingURL=test-byok.d.ts.map

package/dist/routes/v2/tests/test-byok.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-byok.d.ts","sourceRoot":"","sources":["../../../../src/routes/v2/tests/test-byok.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/routes/v2/tests/test-byok.js

@@ -0,0 +1,73 @@
+/**
+ * Test BYOK (Bring Your Own Keys) functionality
+ *
+ * This test verifies that when a user has configured their own provider keys,
+ * those keys are used instead of the platform keys.
+ */
+import { db } from '../../../lib/db/postgres.js';
+import { decrypt } from '../../../lib/encryption.js';
+async function testBYOK() {
+    console.log('\n🔑 Testing BYOK Key Resolution...\n');
+    // Test user ID from the database query
+    const userId = 'ebd64998-465d-4211-ad67-87b4e01ad0da';
+    try {
+        // Test 1: Retrieve OpenAI key
+        console.log('Test 1: Retrieving OpenAI BYOK key...');
+        const openaiKey = await db.getProviderKey(userId, 'openai');
+        if (openaiKey) {
+            console.log('✓ OpenAI key found in database');
+            console.log(`  Provider: ${openaiKey.provider}`);
+            console.log(`  Key Prefix: ${openaiKey.keyPrefix}`);
+            console.log(`  Created: ${openaiKey.createdAt}`);
+            // Decrypt and verify the key
+            const encryptionKey = process.env.ENCRYPTION_KEY;
+            if (!encryptionKey) {
+                throw new Error('ENCRYPTION_KEY not found in environment');
+            }
+            const decryptedKey = decrypt(openaiKey.encryptedKey, encryptionKey);
+            console.log(`  Decrypted key starts with: ${decryptedKey.substring(0, 10)}...`);
+            console.log(`  Decrypted key length: ${decryptedKey.length} characters`);
+        }
+        else {
+            console.log('✗ No OpenAI key found');
+        }
+        console.log('\nTest 2: Retrieving Anthropic BYOK key...');
+        const anthropicKey = await db.getProviderKey(userId, 'anthropic');
+        if (anthropicKey) {
+            console.log('✓ Anthropic key found in database');
+            console.log(`  Provider: ${anthropicKey.provider}`);
+            console.log(`  Key Prefix: ${anthropicKey.keyPrefix}`);
+            console.log(`  Created: ${anthropicKey.createdAt}`);
+            const encryptionKey = process.env.ENCRYPTION_KEY;
+            if (!encryptionKey) {
+                throw new Error('ENCRYPTION_KEY not found in environment');
+            }
+            const decryptedKey = decrypt(anthropicKey.encryptedKey, encryptionKey);
+            console.log(`  Decrypted key starts with: ${decryptedKey.substring(0, 14)}...`);
+            console.log(`  Decrypted key length: ${decryptedKey.length} characters`);
+        }
+        else {
+            console.log('✗ No Anthropic key found');
+        }
+        console.log('\nTest 3: Retrieving Google BYOK key (should not exist)...');
+        const googleKey = await db.getProviderKey(userId, 'google');
+        if (googleKey) {
+            console.log('✓ Google key found in database');
+        }
+        else {
+            console.log('✓ No Google key found (as expected)');
+        }
+        console.log('\n✅ BYOK test completed successfully!\n');
+    }
+    catch (error) {
+        console.error('\n❌ BYOK test failed:', error);
+        throw error;
+    }
+}
+// Run the test
+testBYOK()
+    .then(() => process.exit(0))
+    .catch((error) => {
+    console.error('Test failed:', error);
+    process.exit(1);
+});

package/dist/services/providers/anthropic-adapter.d.ts

@@ -7,7 +7,7 @@ export declare class AnthropicAdapter extends BaseProviderAdapter {
     protected toolChoiceMappings: Record<string, string | object>;
     protected finishReasonMappings: Record<string, FinishReason>;
     protected mapToolChoice(choice: ToolChoice): string | object | undefined;
-    call(request: LayerRequest): Promise<LayerResponse>;
+    call(request: LayerRequest, userId?: string): Promise<LayerResponse>;
     private handleChat;
 }
 //# sourceMappingURL=anthropic-adapter.d.ts.map

package/dist/services/providers/anthropic-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anthropic-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/anthropic-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAmB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,UAAU,EACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAa1E,qBAAa,gBAAiB,SAAQ,mBAAmB;IACvD,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAsB;IAElD,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAQ1C;IAEF,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAI3D;IAEF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAM1D;IAEF,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS;IAalE,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;YAiB3C,UAAU;CA4JzB"}
+{"version":3,"file":"anthropic-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/anthropic-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAmB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,UAAU,EACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAoB1E,qBAAa,gBAAiB,SAAQ,mBAAmB;IACvD,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAsB;IAElD,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAQ1C;IAEF,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAI3D;IAEF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAM1D;IAEF,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS;IAalE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;YAoB5D,UAAU;CA4JzB"}

package/dist/services/providers/anthropic-adapter.js

@@ -1,8 +1,14 @@
 import Anthropic from "@anthropic-ai/sdk";
 import { BaseProviderAdapter, ADAPTER_HANDLED } from './base-adapter.js';
 import { PROVIDER } from "../../lib/provider-constants.js";
+import { resolveApiKey } from '../../lib/key-resolver.js';
 let anthropic = null;
-function getAnthropicClient() {
+function getAnthropicClient(apiKey) {
+    // If custom API key provided, create new client
+    if (apiKey) {
+        return new Anthropic({ apiKey });
+    }
+    // Otherwise use singleton with platform key
     if (!anthropic) {
         anthropic = new Anthropic({
             apiKey: process.env.ANTHROPIC_API_KEY,
@@ -47,10 +53,12 @@ export class AnthropicAdapter extends BaseProviderAdapter {
         // Handle string format using base mappings
         return super.mapToolChoice(choice);
     }
-    async call(request) {
+    async call(request, userId) {
+        // Resolve API key (BYOK → Platform key)
+        const apiKey = await resolveApiKey(this.provider, userId, process.env.ANTHROPIC_API_KEY);
         switch (request.type) {
             case 'chat':
-                return this.handleChat(request);
+                return this.handleChat(request, apiKey);
             case 'image':
                 throw new Error('Image generation not yet supported by Anthropic');
             case 'embeddings':
@@ -63,9 +71,9 @@ export class AnthropicAdapter extends BaseProviderAdapter {
                 throw new Error(`Unknown modality: ${request.type}`);
         }
     }
-    async handleChat(request) {
+    async handleChat(request, apiKey) {
         const startTime = Date.now();
-        const client = getAnthropicClient();
+        const client = getAnthropicClient(apiKey);
         const { data: chat, model } = request;
         if (!model) {
             throw new Error('Model is required for chat completions');

package/dist/services/providers/base-adapter.d.ts

@@ -3,6 +3,7 @@ import type { Provider } from "../../lib/provider-constants.js";
 export { ADAPTER_HANDLED };
 export declare abstract class BaseProviderAdapter {
     protected abstract provider: Provider;
+    protected userId?: string;
     protected roleMappings?: Record<Role, string>;
     protected imageDetailMappings?: Record<ImageDetail, string>;
     protected toolChoiceMappings?: Record<string, string | object>;
@@ -15,7 +16,7 @@ export declare abstract class BaseProviderAdapter {
     protected audioMimeTypeMappings?: Record<AudioMimeType, string>;
     protected imageMimeTypeMappings?: Record<ImageMimeType, string>;
     protected encodingFormatMappings?: Record<EncodingFormat, string>;
-    abstract call(request: LayerRequest): Promise<LayerResponse>;
+    abstract call(request: LayerRequest, userId?: string): Promise<LayerResponse>;
     protected mapRole(role: Role): string;
     protected mapImageDetail(detail: ImageDetail): string | undefined;
     protected mapImageSize(size: ImageSize): string | undefined;

package/dist/services/providers/base-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/base-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,aAAa,EACb,aAAa,EACb,YAAY,EACZ,UAAU,EACV,cAAc,EACd,eAAe,EAGhB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,8BAAsB,mBAAmB;IACvC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAEtC,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,SAAS,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5D,SAAS,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAC/D,SAAS,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9D,SAAS,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxD,SAAS,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9D,SAAS,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,SAAS,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxD,SAAS,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5D,SAAS,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAChE,SAAS,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAChE,SAAS,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAElE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAE5D,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM;IAcrC,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS;IAQjE,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAQ3D,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS;IAQpE,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS;IAQ9D,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAQ3D,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS;IAQjE,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS;IAQvE,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS;IAQvE,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS;IAQvE,SAAS,CAAC,eAAe,CAAC,oBAAoB,EAAE,MAAM,GAAG,YAAY;IAQrE,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS;IAYxE,SAAS,CAAC,aAAa,CACrB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,GACvB,MAAM;CAOV"}
+{"version":3,"file":"base-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/base-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,aAAa,EACb,aAAa,EACb,YAAY,EACZ,UAAU,EACV,cAAc,EACd,eAAe,EAGhB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,8BAAsB,mBAAmB;IACvC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACtC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAE1B,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,SAAS,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5D,SAAS,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAC/D,SAAS,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9D,SAAS,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxD,SAAS,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9D,SAAS,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,SAAS,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxD,SAAS,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5D,SAAS,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAChE,SAAS,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAChE,SAAS,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAElE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAE7E,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM;IAcrC,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS;IAQjE,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAQ3D,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS;IAQpE,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS;IAQ9D,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAQ3D,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS;IAQjE,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS;IAQvE,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS;IAQvE,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS;IAQvE,SAAS,CAAC,eAAe,CAAC,oBAAoB,EAAE,MAAM,GAAG,YAAY;IAQrE,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS;IAYxE,SAAS,CAAC,aAAa,CACrB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,GACvB,MAAM;CAOV"}

package/dist/services/providers/google-adapter.d.ts

@@ -11,7 +11,7 @@ export declare class GoogleAdapter extends BaseProviderAdapter {
         aspectRatio: string;
         resolution: string;
     }>;
-    call(request: LayerRequest): Promise<LayerResponse>;
+    call(request: LayerRequest, userId?: string): Promise<LayerResponse>;
     private handleChat;
     private handleImageGeneration;
     private handleEmbeddings;

package/dist/services/providers/google-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/google-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,yBAAyB,EAI1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,SAAS,EACV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAW1E,qBAAa,aAAc,SAAQ,mBAAmB;IACpD,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAmB;IAE/C,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAQ1C;IAGF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAO1D;IAEF,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAIrE;IAGF,SAAS,CAAC,eAAe,EAAE,MAAM,CAC/B,SAAS,EACT;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAC5C,CAKC;IAEI,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;YAiB3C,UAAU;YAqLV,qBAAqB;YAkCrB,gBAAgB;YAmChB,qBAAqB;YAmHrB,kBAAkB;IAwChC,OAAO,CAAC,KAAK;CAGd"}
+{"version":3,"file":"google-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/google-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,yBAAyB,EAI1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,SAAS,EACV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAkB1E,qBAAa,aAAc,SAAQ,mBAAmB;IACpD,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAmB;IAE/C,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAQ1C;IAGF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAO1D;IAEF,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAIrE;IAGF,SAAS,CAAC,eAAe,EAAE,MAAM,CAC/B,SAAS,EACT;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAC5C,CAKC;IAEI,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;YAoB5D,UAAU;YAsLV,qBAAqB;YAmCrB,gBAAgB;YAoChB,qBAAqB;YAoHrB,kBAAkB;IAyChC,OAAO,CAAC,KAAK;CAGd"}

package/dist/services/providers/google-adapter.js

@@ -2,8 +2,14 @@ import { GoogleGenAI, FunctionCallingConfigMode, VideoGenerationReferenceType, }
 import { BaseProviderAdapter } from './base-adapter.js';
 import { ADAPTER_HANDLED } from './base-adapter.js';
 import { PROVIDER } from "../../lib/provider-constants.js";
+import { resolveApiKey } from '../../lib/key-resolver.js';
 let client = null;
-function getGoogleClient() {
+function getGoogleClient(apiKey) {
+    // If custom API key provided, create new client
+    if (apiKey) {
+        return new GoogleGenAI({ apiKey });
+    }
+    // Otherwise use singleton with platform key
     if (!client) {
         client = new GoogleGenAI({ apiKey: process.env.GOOGLE_API_KEY || '' });
     }
@@ -44,25 +50,27 @@ export class GoogleAdapter extends BaseProviderAdapter {
             '1792x1024': { aspectRatio: '16:9', resolution: '1080p' },
         };
     }
-    async call(request) {
+    async call(request, userId) {
+        // Resolve API key (BYOK → Platform key)
+        const apiKey = await resolveApiKey(this.provider, userId, process.env.GOOGLE_API_KEY);
         switch (request.type) {
             case 'chat':
-                return this.handleChat(request);
+                return this.handleChat(request, apiKey);
             case 'image':
-                return this.handleImageGeneration(request);
+                return this.handleImageGeneration(request, apiKey);
             case 'embeddings':
-                return this.handleEmbeddings(request);
+                return this.handleEmbeddings(request, apiKey);
             case 'tts':
-                return this.handleTextToSpeech(request);
+                return this.handleTextToSpeech(request, apiKey);
             case 'video':
-                return this.handleVideoGeneration(request);
+                return this.handleVideoGeneration(request, apiKey);
             default:
                 throw new Error(`Unknown modality: ${request.type}`);
         }
     }
-    async handleChat(request) {
+    async handleChat(request, apiKey) {
         const startTime = Date.now();
-        const client = getGoogleClient();
+        const client = getGoogleClient(apiKey);
         const { data: chat, model } = request;
         if (!model) {
             throw new Error('Model is required for chat completion');
@@ -215,9 +223,9 @@ export class GoogleAdapter extends BaseProviderAdapter {
             raw: response,
         };
     }
-    async handleImageGeneration(request) {
+    async handleImageGeneration(request, apiKey) {
         const startTime = Date.now();
-        const client = getGoogleClient();
+        const client = getGoogleClient(apiKey);
         const { data: image, model } = request;
         if (!model) {
             throw new Error('Model is required for chat completion');
@@ -241,9 +249,9 @@ export class GoogleAdapter extends BaseProviderAdapter {
             raw: response,
         };
     }
-    async handleEmbeddings(request) {
+    async handleEmbeddings(request, apiKey) {
         const startTime = Date.now();
-        const client = getGoogleClient();
+        const client = getGoogleClient(apiKey);
         const { data: embedding, model } = request;
         if (!model) {
             throw new Error('Model is required for chat completion');
@@ -268,9 +276,9 @@ export class GoogleAdapter extends BaseProviderAdapter {
             raw: response,
         };
     }
-    async handleVideoGeneration(request) {
+    async handleVideoGeneration(request, apiKey) {
         const startTime = Date.now();
-        const client = getGoogleClient();
+        const client = getGoogleClient(apiKey);
         const { data: video, model } = request;
         if (!model) {
             throw new Error('Model is required for chat completion');
@@ -371,9 +379,9 @@ export class GoogleAdapter extends BaseProviderAdapter {
             raw: operation.response,
         };
     }
-    async handleTextToSpeech(request) {
+    async handleTextToSpeech(request, apiKey) {
         const startTime = Date.now();
-        const client = getGoogleClient();
+        const client = getGoogleClient(apiKey);
         const { data: tts, model } = request;
         if (!model) {
             throw new Error('Model is required for chat completion');

package/dist/services/providers/mistral-adapter.d.ts

@@ -6,7 +6,7 @@ export declare class MistralAdapter extends BaseProviderAdapter {
     protected roleMappings: Record<Role, string>;
     protected finishReasonMappings: Record<string, FinishReason>;
     protected toolChoiceMappings: Record<string, string>;
-    call(request: LayerRequest): Promise<LayerResponse>;
+    call(request: LayerRequest, userId?: string): Promise<LayerResponse>;
     private handleChat;
     private handleEmbeddings;
     private handleOCR;

package/dist/services/providers/mistral-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mistral-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/mistral-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,YAAY,EAEb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAa1E,qBAAa,cAAe,SAAQ,mBAAmB;IACrD,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAoB;IAEhD,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAQ1C;IAGF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAM1D;IAEF,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIlD;IAEI,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;YAmB3C,UAAU;YA8LV,gBAAgB;YAuChB,SAAS;CA2ExB"}
+{"version":3,"file":"mistral-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/mistral-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,YAAY,EAEb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAoB1E,qBAAa,cAAe,SAAQ,mBAAmB;IACrD,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAoB;IAEhD,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAQ1C;IAGF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAM1D;IAEF,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIlD;IAEI,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;YAsB5D,UAAU;YA+LV,gBAAgB;YAwChB,SAAS;CA4ExB"}

package/dist/services/providers/mistral-adapter.js

@@ -2,8 +2,14 @@ import { Mistral } from '@mistralai/mistralai';
 import { BaseProviderAdapter } from './base-adapter.js';
 import { ADAPTER_HANDLED, } from '@layer-ai/sdk';
 import { PROVIDER } from "../../lib/provider-constants.js";
+import { resolveApiKey } from '../../lib/key-resolver.js';
 let client = null;
-function getMistralClient() {
+function getMistralClient(apiKey) {
+    // If custom API key provided, create new client
+    if (apiKey) {
+        return new Mistral({ apiKey });
+    }
+    // Otherwise use singleton with platform key
     if (!client) {
         client = new Mistral({
             apiKey: process.env.MISTRAL_API_KEY || '',
@@ -38,14 +44,16 @@ export class MistralAdapter extends BaseProviderAdapter {
             required: 'any',
         };
     }
-    async call(request) {
+    async call(request, userId) {
+        // Resolve API key (BYOK → Platform key)
+        const apiKey = await resolveApiKey(this.provider, userId, process.env.MISTRAL_API_KEY);
         switch (request.type) {
             case 'chat':
-                return this.handleChat(request);
+                return this.handleChat(request, apiKey);
             case 'embeddings':
-                return this.handleEmbeddings(request);
+                return this.handleEmbeddings(request, apiKey);
             case 'ocr':
-                return this.handleOCR(request);
+                return this.handleOCR(request, apiKey);
             case 'image':
                 throw new Error('Image generation not supported by Mistral');
             case 'tts':
@@ -56,9 +64,9 @@ export class MistralAdapter extends BaseProviderAdapter {
                 throw new Error(`Unknown modality: ${request.type}`);
         }
     }
-    async handleChat(request) {
+    async handleChat(request, apiKey) {
         const startTime = Date.now();
-        const mistral = getMistralClient();
+        const mistral = getMistralClient(apiKey);
         const { data: chat, model } = request;
         if (!model) {
             throw new Error('Model is required for chat completion');
@@ -209,9 +217,9 @@ export class MistralAdapter extends BaseProviderAdapter {
             raw: response,
         };
     }
-    async handleEmbeddings(request) {
+    async handleEmbeddings(request, apiKey) {
         const startTime = Date.now();
-        const mistral = getMistralClient();
+        const mistral = getMistralClient(apiKey);
         const { data: embedding, model } = request;
         if (!model) {
             throw new Error('Model is required for embeddings');
@@ -239,9 +247,9 @@ export class MistralAdapter extends BaseProviderAdapter {
             raw: response,
         };
     }
-    async handleOCR(request) {
+    async handleOCR(request, apiKey) {
         const startTime = Date.now();
-        const mistral = getMistralClient();
+        const mistral = getMistralClient(apiKey);
         const { data: ocr, model } = request;
         const ocrModel = model || 'mistral-ocr-latest';
         let document;

package/dist/services/providers/openai-adapter.d.ts

@@ -11,7 +11,7 @@ export declare class OpenAIAdapter extends BaseProviderAdapter {
     protected imageStyleMappings: Record<ImageStyle, string>;
     protected videoSizeMappings: Record<VideoSize, string>;
     protected audioFormatMappings: Record<AudioFormat, string>;
-    call(request: LayerRequest): Promise<LayerResponse>;
+    call(request: LayerRequest, userId?: string): Promise<LayerResponse>;
     private handleChat;
     private handleImageGeneration;
     private handleEmbeddings;

package/dist/services/providers/openai-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/openai-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAa1E,qBAAa,aAAc,SAAQ,mBAAmB;IACpD,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAmB;IAE/C,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAQ1C;IAEF,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAIxD;IAEF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAK1D;IAEF,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAQpD;IAEF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAG1D;IAEF,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAGtD;IAEF,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAKpD;IAEF,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAOxD;IAEI,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;YAiB3C,UAAU;YA2GV,qBAAqB;YA6BrB,gBAAgB;YAiChB,kBAAkB;CA8BjC"}
+{"version":3,"file":"openai-adapter.d.ts","sourceRoot":"","sources":["../../../src/services/providers/openai-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAoB1E,qBAAa,aAAc,SAAQ,mBAAmB;IACpD,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAmB;IAE/C,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAQ1C;IAEF,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAIxD;IAEF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAK1D;IAEF,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAQpD;IAEF,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAG1D;IAEF,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAGtD;IAEF,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAKpD;IAEF,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAOxD;IAEI,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;YAoB5D,UAAU;YA2GV,qBAAqB;YA6BrB,gBAAgB;YAiChB,kBAAkB;CA8BjC"}

package/dist/services/providers/openai-adapter.js

@@ -1,8 +1,14 @@
 import OpenAI from 'openai';
 import { BaseProviderAdapter } from './base-adapter.js';
 import { PROVIDER } from "../../lib/provider-constants.js";
+import { resolveApiKey } from '../../lib/key-resolver.js';
 let openai = null;
-function getOpenAIClient() {
+function getOpenAIClient(apiKey) {
+    // If custom API key provided, create new client
+    if (apiKey) {
+        return new OpenAI({ apiKey });
+    }
+    // Otherwise use singleton with platform key
     if (!openai) {
         openai = new OpenAI({
             apiKey: process.env.OPENAI_API_KEY,
@@ -66,25 +72,27 @@ export class OpenAIAdapter extends BaseProviderAdapter {
             pcm: 'pcm',
         };
     }
-    async call(request) {
+    async call(request, userId) {
+        // Resolve API key (BYOK → Platform key)
+        const apiKey = await resolveApiKey(this.provider, userId, process.env.OPENAI_API_KEY);
         switch (request.type) {
             case 'chat':
-                return this.handleChat(request);
+                return this.handleChat(request, apiKey);
             case 'image':
-                return this.handleImageGeneration(request);
+                return this.handleImageGeneration(request, apiKey);
             case 'embeddings':
-                return this.handleEmbeddings(request);
+                return this.handleEmbeddings(request, apiKey);
             case 'tts':
-                return this.handleTextToSpeech(request);
+                return this.handleTextToSpeech(request, apiKey);
             case 'video':
                 throw new Error('Video generation not yet supported by OpenAI');
             default:
                 throw new Error(`Unknown modality: ${request.type}`);
         }
     }
-    async handleChat(request) {
+    async handleChat(request, apiKey) {
         const startTime = Date.now();
-        const client = getOpenAIClient();
+        const client = getOpenAIClient(apiKey);
         const { data: chat, model } = request;
         if (!model) {
             throw new Error('Model is required for chat completion');
@@ -176,9 +184,9 @@ export class OpenAIAdapter extends BaseProviderAdapter {
             raw: response,
         };
     }
-    async handleImageGeneration(request) {
+    async handleImageGeneration(request, apiKey) {
         const startTime = Date.now();
-        const client = getOpenAIClient();
+        const client = getOpenAIClient(apiKey);
         const { data: image, model } = request;
         if (!model) {
             throw new Error('Model is required for image generation');
@@ -201,9 +209,9 @@ export class OpenAIAdapter extends BaseProviderAdapter {
             raw: response,
         };
     }
-    async handleEmbeddings(request) {
+    async handleEmbeddings(request, apiKey) {
         const startTime = Date.now();
-        const client = getOpenAIClient();
+        const client = getOpenAIClient(apiKey);
         const { data: embedding, model } = request;
         if (!model) {
             throw new Error('Model is required for embeddings');
@@ -229,9 +237,9 @@ export class OpenAIAdapter extends BaseProviderAdapter {
             raw: response,
         };
     }
-    async handleTextToSpeech(request) {
+    async handleTextToSpeech(request, apiKey) {
         const startTime = Date.now();
-        const client = getOpenAIClient();
+        const client = getOpenAIClient(apiKey);
         const { data: tts, model } = request;
         if (!model) {
             throw new Error('Model is required for tts');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@layer-ai/core",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "description": "Core API routes and services for Layer AI",
   "type": "module",
   "main": "./dist/index.js",