@puckeditor/cloud-client 0.8.0-canary.9c5fbcbb → 0.8.0-canary.ad0c4c0e

package/dist/{chunk-XFKCRMW6.mjs → chunk-BEW26CFQ.mjs}

@@ -22113,6 +22113,62 @@ var prepareUserTools = (toolRegistry) => Object.keys(toolRegistry).reduce(
   {}
 );
 
+// src/lib/seal-provider-key.ts
+init_react_import();
+var DEFAULT_SEALING_KEY = {
+  kid: "puck-2026-07",
+  publicKey: "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"
+};
+var MAX_PLAINTEXT_BYTES = 446;
+var fromBase64 = (b64) => {
+  const binary = atob(b64);
+  const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+};
+var toBase64 = (bytes) => {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary);
+};
+var importCache = /* @__PURE__ */ new Map();
+var importPublicKey = (publicKey) => {
+  let imported = importCache.get(publicKey);
+  if (!imported) {
+    imported = crypto.subtle.importKey(
+      "spki",
+      fromBase64(publicKey),
+      { name: "RSA-OAEP", hash: "SHA-256" },
+      false,
+      ["encrypt"]
+    );
+    importCache.set(publicKey, imported);
+  }
+  return imported;
+};
+var activeSealingKey = DEFAULT_SEALING_KEY;
+var sealProviderKey = async (providerApiKey, puckApiKey) => {
+  const sealingKey = activeSealingKey;
+  if (typeof crypto === "undefined" || !crypto.subtle) {
+    throw new Error(
+      "BYOK requires the WebCrypto API (Node 18+ or an edge runtime) to encrypt the provider key"
+    );
+  }
+  const encoder = new TextEncoder();
+  const plaintext = encoder.encode(providerApiKey);
+  if (plaintext.length > MAX_PLAINTEXT_BYTES) {
+    throw new Error(
+      `Provider API key is too long to seal (${plaintext.length} bytes, max ${MAX_PLAINTEXT_BYTES})`
+    );
+  }
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "RSA-OAEP", label: encoder.encode(puckApiKey) },
+    await importPublicKey(sealingKey.publicKey),
+    plaintext
+  );
+  return `v1.${sealingKey.kid}.${toBase64(new Uint8Array(ciphertext))}`;
+};
+
 // src/lib/get-api-key.ts
 init_react_import();
 var getApiKey = () => process.env.PUCK_API_KEY;
@@ -22183,7 +22239,7 @@ async function* iterateSSE(body) {
 
 // src/lib/cloud-api.ts
 var DEFAULT_API_VERSION = "v2";
-var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.9c5fbcbb" : "unknown";
+var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.ad0c4c0e" : "unknown";
 var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
   const {
     ai = {},
@@ -22196,19 +22252,31 @@ var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
       "No Puck API key specified. Set the PUCK_API_KEY environment variable, or provide one to the function"
     );
   }
-  const { context, tools = {} } = ai;
+  const { context, tools = {}, designMode, model, providerOptions } = ai;
+  const providerApiKey = model ? ai.providerApiKey ?? process.env.OPENAI_API_KEY : void 0;
+  if (model && !providerApiKey) {
+    throw new Error(
+      `No provider API key found for "${model}". Please provide one via the providerApiKey parameter.`
+    );
+  }
+  const sealedProviderKey = providerApiKey ? await sealProviderKey(providerApiKey, apiKey) : void 0;
   const res = await fetch(`${host}/${path}`, {
     headers: {
       "x-api-key": apiKey,
       "puck-api-version": apiVersion,
       "x-puck-cloud-client-version": CLOUD_CLIENT_VERSION,
-      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {}
+      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {},
+      ...sealedProviderKey ? { "x-puck-provider-key": sealedProviderKey } : {}
     },
     method: "post",
     body: JSON.stringify({
       ...body,
       context,
-      tools: prepareUserTools(tools)
+      tools: prepareUserTools(tools),
+      ...designMode ? {
+        designMode
+      } : {},
+      ...model ? { byok: { model, providerOptions } } : {}
     })
   });
   if (!res.body) {
@@ -22230,12 +22298,34 @@ var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
 };
 
 // src/api/chat.ts
+function chatPrivate({ chatId, messages, config: config2, pageData, mode }, options = {}, forwardHeaders) {
+  const resolvedMode = mode ?? options?.ai?.mode;
+  const stream = createUIMessageStream({
+    execute: async ({ writer }) => {
+      await cloudApi(
+        "chat",
+        { chatId, config: config2, messages, pageData, mode: resolvedMode },
+        options,
+        (chunk) => {
+          if (chunk.type === "data-finish") {
+            options.ai?.onFinish?.(chunk.data);
+          } else {
+            writer.write(chunk);
+          }
+        },
+        forwardHeaders
+      );
+    }
+  });
+  return createUIMessageStreamResponse({ stream });
+}
 function chat({ chatId, messages, config: config2, pageData }, options = {}, forwardHeaders) {
+  const resolvedMode = options?.ai?.mode;
   const stream = createUIMessageStream({
     execute: async ({ writer }) => {
       await cloudApi(
         "chat",
-        { chatId, config: config2, messages, pageData },
+        { chatId, config: config2, messages, pageData, mode: resolvedMode },
         options,
         (chunk) => {
           if (chunk.type === "data-finish") {
@@ -22259,21 +22349,35 @@ async function generate({
   pageData,
   context,
   tools,
+  mode,
+  designMode,
   apiKey,
   host,
-  onFinish
+  onFinish,
+  model,
+  providerApiKey,
+  providerOptions
 }) {
   let result = null;
-  const options = { ai: { context, tools }, apiKey, host };
-  await cloudApi("generate", { prompt, config: config2, pageData }, options, (chunk) => {
-    if (chunk.type === "data-page") {
-      result = chunk.data;
-    } else if (chunk.type === "data-finish") {
-      onFinish?.(chunk.data);
-    } else if (chunk.type === "error") {
-      throw new Error(chunk.errorText);
+  const options = {
+    ai: { context, tools, designMode, model, providerApiKey, providerOptions },
+    apiKey,
+    host
+  };
+  await cloudApi(
+    "generate",
+    { prompt, config: config2, pageData, mode },
+    options,
+    (chunk) => {
+      if (chunk.type === "data-page") {
+        result = chunk.data;
+      } else if (chunk.type === "data-finish") {
+        onFinish?.(chunk.data);
+      } else if (chunk.type === "error") {
+        throw new Error(chunk.errorText);
+      }
     }
-  });
+  );
   return result;
 }
 
@@ -22442,7 +22546,7 @@ var routeRegistry = [
   {
     pattern: "/api/puck/chat",
     methods: {
-      POST: ({ body, headers }, options) => chat(body, options, {
+      POST: ({ body, headers }, options) => chatPrivate(body, options, {
         pluginAiVersion: headers.get("x-puck-plugin-ai-version")
       })
     }
@@ -22511,6 +22615,7 @@ var endpoints = ["chat"];
 
 export {
   getApiKey,
+  chatPrivate,
   chat,
   createAttachments,
   getAttachment,

package/dist/experimental.d.mts

@@ -1,6 +1,8 @@
 import { PuckCloudOptions as PuckCloudOptions$1 } from './index.mjs';
-export { ChatParams, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.mjs';
+export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, PuckAiModel, PuckAiProviderOptions, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.mjs';
 import { Data } from '@puckeditor/core';
+import '@ai-sdk/provider';
+import '@ai-sdk/provider-utils';
 import 'zod/v4';
 import 'ai';
 

package/dist/experimental.d.ts

@@ -1,6 +1,8 @@
 import { PuckCloudOptions as PuckCloudOptions$1 } from './index.js';
-export { ChatParams, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.js';
+export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, PuckAiModel, PuckAiProviderOptions, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.js';
 import { Data } from '@puckeditor/core';
+import '@ai-sdk/provider';
+import '@ai-sdk/provider-utils';
 import 'zod/v4';
 import 'ai';
 

package/dist/experimental.js

@@ -22156,6 +22156,62 @@ var prepareUserTools = (toolRegistry) => Object.keys(toolRegistry).reduce(
   {}
 );
 
+// src/lib/seal-provider-key.ts
+init_react_import();
+var DEFAULT_SEALING_KEY = {
+  kid: "puck-2026-07",
+  publicKey: "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"
+};
+var MAX_PLAINTEXT_BYTES = 446;
+var fromBase64 = (b64) => {
+  const binary = atob(b64);
+  const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+};
+var toBase64 = (bytes) => {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary);
+};
+var importCache = /* @__PURE__ */ new Map();
+var importPublicKey = (publicKey) => {
+  let imported = importCache.get(publicKey);
+  if (!imported) {
+    imported = crypto.subtle.importKey(
+      "spki",
+      fromBase64(publicKey),
+      { name: "RSA-OAEP", hash: "SHA-256" },
+      false,
+      ["encrypt"]
+    );
+    importCache.set(publicKey, imported);
+  }
+  return imported;
+};
+var activeSealingKey = DEFAULT_SEALING_KEY;
+var sealProviderKey = async (providerApiKey, puckApiKey) => {
+  const sealingKey = activeSealingKey;
+  if (typeof crypto === "undefined" || !crypto.subtle) {
+    throw new Error(
+      "BYOK requires the WebCrypto API (Node 18+ or an edge runtime) to encrypt the provider key"
+    );
+  }
+  const encoder = new TextEncoder();
+  const plaintext = encoder.encode(providerApiKey);
+  if (plaintext.length > MAX_PLAINTEXT_BYTES) {
+    throw new Error(
+      `Provider API key is too long to seal (${plaintext.length} bytes, max ${MAX_PLAINTEXT_BYTES})`
+    );
+  }
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "RSA-OAEP", label: encoder.encode(puckApiKey) },
+    await importPublicKey(sealingKey.publicKey),
+    plaintext
+  );
+  return `v1.${sealingKey.kid}.${toBase64(new Uint8Array(ciphertext))}`;
+};
+
 // src/lib/get-api-key.ts
 init_react_import();
 var getApiKey = () => process.env.PUCK_API_KEY;
@@ -22226,7 +22282,7 @@ async function* iterateSSE(body) {
 
 // src/lib/cloud-api.ts
 var DEFAULT_API_VERSION = "v2";
-var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.9c5fbcbb" : "unknown";
+var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.ad0c4c0e" : "unknown";
 var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
   const {
     ai = {},
@@ -22239,19 +22295,31 @@ var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
       "No Puck API key specified. Set the PUCK_API_KEY environment variable, or provide one to the function"
     );
   }
-  const { context, tools = {} } = ai;
+  const { context, tools = {}, designMode, model, providerOptions } = ai;
+  const providerApiKey = model ? ai.providerApiKey ?? process.env.OPENAI_API_KEY : void 0;
+  if (model && !providerApiKey) {
+    throw new Error(
+      `No provider API key found for "${model}". Please provide one via the providerApiKey parameter.`
+    );
+  }
+  const sealedProviderKey = providerApiKey ? await sealProviderKey(providerApiKey, apiKey) : void 0;
   const res = await fetch(`${host}/${path}`, {
     headers: {
       "x-api-key": apiKey,
       "puck-api-version": apiVersion,
       "x-puck-cloud-client-version": CLOUD_CLIENT_VERSION,
-      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {}
+      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {},
+      ...sealedProviderKey ? { "x-puck-provider-key": sealedProviderKey } : {}
     },
     method: "post",
     body: JSON.stringify({
       ...body,
       context,
-      tools: prepareUserTools(tools)
+      tools: prepareUserTools(tools),
+      ...designMode ? {
+        designMode
+      } : {},
+      ...model ? { byok: { model, providerOptions } } : {}
     })
   });
   if (!res.body) {
@@ -22273,12 +22341,34 @@ var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
 };
 
 // src/api/chat.ts
+function chatPrivate({ chatId, messages, config: config2, pageData, mode }, options = {}, forwardHeaders) {
+  const resolvedMode = mode ?? options?.ai?.mode;
+  const stream = createUIMessageStream({
+    execute: async ({ writer }) => {
+      await cloudApi(
+        "chat",
+        { chatId, config: config2, messages, pageData, mode: resolvedMode },
+        options,
+        (chunk) => {
+          if (chunk.type === "data-finish") {
+            options.ai?.onFinish?.(chunk.data);
+          } else {
+            writer.write(chunk);
+          }
+        },
+        forwardHeaders
+      );
+    }
+  });
+  return createUIMessageStreamResponse({ stream });
+}
 function chat({ chatId, messages, config: config2, pageData }, options = {}, forwardHeaders) {
+  const resolvedMode = options?.ai?.mode;
   const stream = createUIMessageStream({
     execute: async ({ writer }) => {
       await cloudApi(
         "chat",
-        { chatId, config: config2, messages, pageData },
+        { chatId, config: config2, messages, pageData, mode: resolvedMode },
         options,
         (chunk) => {
           if (chunk.type === "data-finish") {
@@ -22788,21 +22878,35 @@ async function generate({
   pageData,
   context,
   tools,
+  mode,
+  designMode,
   apiKey,
   host,
-  onFinish
+  onFinish,
+  model,
+  providerApiKey,
+  providerOptions
 }) {
   let result = null;
-  const options = { ai: { context, tools }, apiKey, host };
-  await cloudApi("generate", { prompt, config: config2, pageData }, options, (chunk) => {
-    if (chunk.type === "data-page") {
-      result = chunk.data;
-    } else if (chunk.type === "data-finish") {
-      onFinish?.(chunk.data);
-    } else if (chunk.type === "error") {
-      throw new Error(chunk.errorText);
+  const options = {
+    ai: { context, tools, designMode, model, providerApiKey, providerOptions },
+    apiKey,
+    host
+  };
+  await cloudApi(
+    "generate",
+    { prompt, config: config2, pageData, mode },
+    options,
+    (chunk) => {
+      if (chunk.type === "data-page") {
+        result = chunk.data;
+      } else if (chunk.type === "data-finish") {
+        onFinish?.(chunk.data);
+      } else if (chunk.type === "error") {
+        throw new Error(chunk.errorText);
+      }
     }
-  });
+  );
   return result;
 }
 
@@ -22833,7 +22937,7 @@ var routeRegistry = [
   {
     pattern: "/api/puck/chat",
     methods: {
-      POST: ({ body }, options) => chat(body, options)
+      POST: ({ body }, options) => chatPrivate(body, options)
     }
   },
   {

package/dist/experimental.mjs

@@ -1,5 +1,6 @@
 import {
   chat,
+  chatPrivate,
   clientTool,
   createAttachments,
   deleteAttachment,
@@ -10,7 +11,7 @@ import {
   getAttachment,
   handlePuckRequest,
   tool
-} from "./chunk-XFKCRMW6.mjs";
+} from "./chunk-BEW26CFQ.mjs";
 import {
   init_react_import
 } from "./chunk-O6DC5HI2.mjs";
@@ -327,7 +328,7 @@ var routeRegistry = [
   {
     pattern: "/api/puck/chat",
     methods: {
-      POST: ({ body }, options) => chat(body, options)
+      POST: ({ body }, options) => chatPrivate(body, options)
     }
   },
   {