@puckeditor/cloud-client 0.8.0-canary.844eb87d → 0.8.0-canary.847b2ca9

package/dist/{chunk-NYUJ34K5.mjs → chunk-6YFG2NZY.mjs}

@@ -22113,6 +22113,62 @@ var prepareUserTools = (toolRegistry) => Object.keys(toolRegistry).reduce(
   {}
 );
 
+// src/lib/seal-provider-key.ts
+init_react_import();
+var DEFAULT_SEALING_KEY = {
+  kid: "puck-2026-07",
+  publicKey: "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"
+};
+var MAX_PLAINTEXT_BYTES = 446;
+var fromBase64 = (b64) => {
+  const binary = atob(b64);
+  const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+};
+var toBase64 = (bytes) => {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary);
+};
+var importCache = /* @__PURE__ */ new Map();
+var importPublicKey = (publicKey) => {
+  let imported = importCache.get(publicKey);
+  if (!imported) {
+    imported = crypto.subtle.importKey(
+      "spki",
+      fromBase64(publicKey),
+      { name: "RSA-OAEP", hash: "SHA-256" },
+      false,
+      ["encrypt"]
+    );
+    importCache.set(publicKey, imported);
+  }
+  return imported;
+};
+var activeSealingKey = DEFAULT_SEALING_KEY;
+var sealProviderKey = async (providerApiKey, puckApiKey) => {
+  const sealingKey = activeSealingKey;
+  if (typeof crypto === "undefined" || !crypto.subtle) {
+    throw new Error(
+      "BYOK requires the WebCrypto API (Node 18+ or an edge runtime) to encrypt the provider key"
+    );
+  }
+  const encoder = new TextEncoder();
+  const plaintext = encoder.encode(providerApiKey);
+  if (plaintext.length > MAX_PLAINTEXT_BYTES) {
+    throw new Error(
+      `Provider API key is too long to seal (${plaintext.length} bytes, max ${MAX_PLAINTEXT_BYTES})`
+    );
+  }
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "RSA-OAEP", label: encoder.encode(puckApiKey) },
+    await importPublicKey(sealingKey.publicKey),
+    plaintext
+  );
+  return `v1.${sealingKey.kid}.${toBase64(new Uint8Array(ciphertext))}`;
+};
+
 // src/lib/get-api-key.ts
 init_react_import();
 var getApiKey = () => process.env.PUCK_API_KEY;
@@ -22183,7 +22239,8 @@ async function* iterateSSE(body) {
 
 // src/lib/cloud-api.ts
 var DEFAULT_API_VERSION = "v2";
-var cloudApi = async (path, body, options = {}, onChunk) => {
+var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.847b2ca9" : "unknown";
+var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
   const {
     ai = {},
     apiKey = getApiKey(),
@@ -22195,9 +22252,22 @@ var cloudApi = async (path, body, options = {}, onChunk) => {
       "No Puck API key specified. Set the PUCK_API_KEY environment variable, or provide one to the function"
     );
   }
-  const { context, tools = {}, designMode } = ai;
+  const { context, tools = {}, designMode, model, providerOptions } = ai;
+  const providerApiKey = model ? ai.providerApiKey ?? process.env.OPENAI_API_KEY : void 0;
+  if (model && !providerApiKey) {
+    throw new Error(
+      `No provider API key found for "${model}". Please provide one via the providerApiKey parameter.`
+    );
+  }
+  const sealedProviderKey = providerApiKey ? await sealProviderKey(providerApiKey, apiKey) : void 0;
   const res = await fetch(`${host}/${path}`, {
-    headers: { "x-api-key": apiKey, "puck-api-version": apiVersion },
+    headers: {
+      "x-api-key": apiKey,
+      "puck-api-version": apiVersion,
+      "x-puck-cloud-client-version": CLOUD_CLIENT_VERSION,
+      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {},
+      ...sealedProviderKey ? { "x-puck-provider-key": sealedProviderKey } : {}
+    },
     method: "post",
     body: JSON.stringify({
       ...body,
@@ -22205,7 +22275,8 @@ var cloudApi = async (path, body, options = {}, onChunk) => {
       tools: prepareUserTools(tools),
       ...designMode ? {
         designMode
-      } : {}
+      } : {},
+      ...model ? { byok: { model, providerOptions } } : {}
     })
   });
   if (!res.body) {
@@ -22227,7 +22298,7 @@ var cloudApi = async (path, body, options = {}, onChunk) => {
 };
 
 // src/api/chat.ts
-function chatPrivate({ chatId, messages, config: config2, pageData, mode }, options = {}) {
+function chatPrivate({ chatId, messages, config: config2, pageData, mode }, options = {}, forwardHeaders) {
   const resolvedMode = mode ?? options?.ai?.mode;
   const stream = createUIMessageStream({
     execute: async ({ writer }) => {
@@ -22241,13 +22312,14 @@ function chatPrivate({ chatId, messages, config: config2, pageData, mode }, opti
           } else {
             writer.write(chunk);
           }
-        }
+        },
+        forwardHeaders
       );
     }
   });
   return createUIMessageStreamResponse({ stream });
 }
-function chat({ chatId, messages, config: config2, pageData }, options = {}) {
+function chat({ chatId, messages, config: config2, pageData }, options = {}, forwardHeaders) {
   const resolvedMode = options?.ai?.mode;
   const stream = createUIMessageStream({
     execute: async ({ writer }) => {
@@ -22261,7 +22333,8 @@ function chat({ chatId, messages, config: config2, pageData }, options = {}) {
           } else {
             writer.write(chunk);
           }
-        }
+        },
+        forwardHeaders
       );
     }
   });
@@ -22278,10 +22351,17 @@ async function generate({
   tools,
   apiKey,
   host,
-  onFinish
+  onFinish,
+  model,
+  providerApiKey,
+  providerOptions
 }) {
   let result = null;
-  const options = { ai: { context, tools }, apiKey, host };
+  const options = {
+    ai: { context, tools, model, providerApiKey, providerOptions },
+    apiKey,
+    host
+  };
   await cloudApi("generate", { prompt, config: config2, pageData }, options, (chunk) => {
     if (chunk.type === "data-page") {
       result = chunk.data;
@@ -22459,7 +22539,9 @@ var routeRegistry = [
   {
     pattern: "/api/puck/chat",
     methods: {
-      POST: ({ body }, options) => chatPrivate(body, options)
+      POST: ({ body, headers }, options) => chatPrivate(body, options, {
+        pluginAiVersion: headers.get("x-puck-plugin-ai-version")
+      })
     }
   }
 ];

package/dist/experimental.d.mts

@@ -1,6 +1,8 @@
 import { PuckCloudOptions as PuckCloudOptions$1 } from './index.mjs';
-export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.mjs';
+export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, PuckAiModel, PuckAiProviderOptions, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.mjs';
 import { Data } from '@puckeditor/core';
+import '@ai-sdk/provider';
+import '@ai-sdk/provider-utils';
 import 'zod/v4';
 import 'ai';
 

package/dist/experimental.d.ts

@@ -1,6 +1,8 @@
 import { PuckCloudOptions as PuckCloudOptions$1 } from './index.js';
-export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.js';
+export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, PuckAiModel, PuckAiProviderOptions, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.js';
 import { Data } from '@puckeditor/core';
+import '@ai-sdk/provider';
+import '@ai-sdk/provider-utils';
 import 'zod/v4';
 import 'ai';
 

package/dist/experimental.js

@@ -22156,6 +22156,62 @@ var prepareUserTools = (toolRegistry) => Object.keys(toolRegistry).reduce(
   {}
 );
 
+// src/lib/seal-provider-key.ts
+init_react_import();
+var DEFAULT_SEALING_KEY = {
+  kid: "puck-2026-07",
+  publicKey: "MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwg3kLK+8I4jz7dORQa4QM/QZ4uMBmYanJnSjgDnSCIjs3aUgRstrIe0RWhXcq0V/nzq/P8dIlVD3idyG2UlTXjJb41mPw3hg1zkjW36jtSfRxmkfQMgIEcfeGl9vTnAVdZnHpf720462ZJTxWt/Wg0Uj5202XilIWjjiM/uYzvUSNSHqqhb6hehvIu7qIHZ4nrA2KkkJyGT2IOTyuWAyApS6G9ju9+AjdIM85ycqufCdjMcso6yWnFjN3VYNfF2N9W10dvlgui0NDZjjTrl/6+ckkzAwknZBwoWl0x/cTW0zyiaUcaU4oytluFXBJM4ELIU+M9kal7ivC58WwULC22yvnZICcaGdX4h0/rlRPc6PppSbbN8NRWzNHkkqdPeqYWIJCcl0W1MvmWa2iTyhpI58Jo8VNBQbCTfdKLy/mGytg2FmBXQiwWHg212XBkG0LriBLWdfMW5KNgPu7z1bgC6Mlb7LIkjgR9qgkBNOgKf2NSuIRq+pn9GTxGJL9YhfSDnn77QExHl1QyieD1dIEDCJPX6USdSnhdi1paSRIenpJTAWcsVMtP/1nMCmSYLcCojXCATQkPALTv1ZrMv0xFL61yaW5JF9RMwYCwnh/TdS1AppdAY6ftZG3sQ3XrwTCCVbw1Cn1rxZ8t3tIbepeZ8CaRFiLuUqaSL0EGzi1x8CAwEAAQ=="
+};
+var MAX_PLAINTEXT_BYTES = 446;
+var fromBase64 = (b64) => {
+  const binary = atob(b64);
+  const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+};
+var toBase64 = (bytes) => {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary);
+};
+var importCache = /* @__PURE__ */ new Map();
+var importPublicKey = (publicKey) => {
+  let imported = importCache.get(publicKey);
+  if (!imported) {
+    imported = crypto.subtle.importKey(
+      "spki",
+      fromBase64(publicKey),
+      { name: "RSA-OAEP", hash: "SHA-256" },
+      false,
+      ["encrypt"]
+    );
+    importCache.set(publicKey, imported);
+  }
+  return imported;
+};
+var activeSealingKey = DEFAULT_SEALING_KEY;
+var sealProviderKey = async (providerApiKey, puckApiKey) => {
+  const sealingKey = activeSealingKey;
+  if (typeof crypto === "undefined" || !crypto.subtle) {
+    throw new Error(
+      "BYOK requires the WebCrypto API (Node 18+ or an edge runtime) to encrypt the provider key"
+    );
+  }
+  const encoder = new TextEncoder();
+  const plaintext = encoder.encode(providerApiKey);
+  if (plaintext.length > MAX_PLAINTEXT_BYTES) {
+    throw new Error(
+      `Provider API key is too long to seal (${plaintext.length} bytes, max ${MAX_PLAINTEXT_BYTES})`
+    );
+  }
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "RSA-OAEP", label: encoder.encode(puckApiKey) },
+    await importPublicKey(sealingKey.publicKey),
+    plaintext
+  );
+  return `v1.${sealingKey.kid}.${toBase64(new Uint8Array(ciphertext))}`;
+};
+
 // src/lib/get-api-key.ts
 init_react_import();
 var getApiKey = () => process.env.PUCK_API_KEY;
@@ -22226,7 +22282,8 @@ async function* iterateSSE(body) {
 
 // src/lib/cloud-api.ts
 var DEFAULT_API_VERSION = "v2";
-var cloudApi = async (path, body, options = {}, onChunk) => {
+var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.847b2ca9" : "unknown";
+var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
   const {
     ai = {},
     apiKey = getApiKey(),
@@ -22238,9 +22295,22 @@ var cloudApi = async (path, body, options = {}, onChunk) => {
       "No Puck API key specified. Set the PUCK_API_KEY environment variable, or provide one to the function"
     );
   }
-  const { context, tools = {}, designMode } = ai;
+  const { context, tools = {}, designMode, model, providerOptions } = ai;
+  const providerApiKey = model ? ai.providerApiKey ?? process.env.OPENAI_API_KEY : void 0;
+  if (model && !providerApiKey) {
+    throw new Error(
+      `No provider API key found for "${model}". Please provide one via the providerApiKey parameter.`
+    );
+  }
+  const sealedProviderKey = providerApiKey ? await sealProviderKey(providerApiKey, apiKey) : void 0;
   const res = await fetch(`${host}/${path}`, {
-    headers: { "x-api-key": apiKey, "puck-api-version": apiVersion },
+    headers: {
+      "x-api-key": apiKey,
+      "puck-api-version": apiVersion,
+      "x-puck-cloud-client-version": CLOUD_CLIENT_VERSION,
+      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {},
+      ...sealedProviderKey ? { "x-puck-provider-key": sealedProviderKey } : {}
+    },
     method: "post",
     body: JSON.stringify({
       ...body,
@@ -22248,7 +22318,8 @@ var cloudApi = async (path, body, options = {}, onChunk) => {
       tools: prepareUserTools(tools),
       ...designMode ? {
         designMode
-      } : {}
+      } : {},
+      ...model ? { byok: { model, providerOptions } } : {}
     })
   });
   if (!res.body) {
@@ -22270,7 +22341,7 @@ var cloudApi = async (path, body, options = {}, onChunk) => {
 };
 
 // src/api/chat.ts
-function chatPrivate({ chatId, messages, config: config2, pageData, mode }, options = {}) {
+function chatPrivate({ chatId, messages, config: config2, pageData, mode }, options = {}, forwardHeaders) {
   const resolvedMode = mode ?? options?.ai?.mode;
   const stream = createUIMessageStream({
     execute: async ({ writer }) => {
@@ -22284,13 +22355,14 @@ function chatPrivate({ chatId, messages, config: config2, pageData, mode }, opti
           } else {
             writer.write(chunk);
           }
-        }
+        },
+        forwardHeaders
       );
     }
   });
   return createUIMessageStreamResponse({ stream });
 }
-function chat({ chatId, messages, config: config2, pageData }, options = {}) {
+function chat({ chatId, messages, config: config2, pageData }, options = {}, forwardHeaders) {
   const resolvedMode = options?.ai?.mode;
   const stream = createUIMessageStream({
     execute: async ({ writer }) => {
@@ -22304,7 +22376,8 @@ function chat({ chatId, messages, config: config2, pageData }, options = {}) {
           } else {
             writer.write(chunk);
           }
-        }
+        },
+        forwardHeaders
       );
     }
   });
@@ -22807,10 +22880,17 @@ async function generate({
   tools,
   apiKey,
   host,
-  onFinish
+  onFinish,
+  model,
+  providerApiKey,
+  providerOptions
 }) {
   let result = null;
-  const options = { ai: { context, tools }, apiKey, host };
+  const options = {
+    ai: { context, tools, model, providerApiKey, providerOptions },
+    apiKey,
+    host
+  };
   await cloudApi("generate", { prompt, config: config2, pageData }, options, (chunk) => {
     if (chunk.type === "data-page") {
       result = chunk.data;

package/dist/experimental.mjs

@@ -11,7 +11,7 @@ import {
   getAttachment,
   handlePuckRequest,
   tool
-} from "./chunk-NYUJ34K5.mjs";
+} from "./chunk-6YFG2NZY.mjs";
 import {
   init_react_import
 } from "./chunk-O6DC5HI2.mjs";