@puckeditor/cloud-client 0.8.0-canary.dc11b4e2 → 0.8.0-canary.fdb02235

package/dist/{chunk-N6PJ6YM6.mjs → chunk-Q3KHF34V.mjs}

@@ -22113,6 +22113,62 @@ var prepareUserTools = (toolRegistry) => Object.keys(toolRegistry).reduce(
   {}
 );
 
+// src/lib/seal-provider-key.ts
+init_react_import();
+var DEFAULT_SEALING_KEY = {
+  kid: "puck-2026-07",
+  publicKey: "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"
+};
+var MAX_PLAINTEXT_BYTES = 446;
+var fromBase64 = (b64) => {
+  const binary = atob(b64);
+  const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+};
+var toBase64 = (bytes) => {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary);
+};
+var importCache = /* @__PURE__ */ new Map();
+var importPublicKey = (publicKey) => {
+  let imported = importCache.get(publicKey);
+  if (!imported) {
+    imported = crypto.subtle.importKey(
+      "spki",
+      fromBase64(publicKey),
+      { name: "RSA-OAEP", hash: "SHA-256" },
+      false,
+      ["encrypt"]
+    );
+    importCache.set(publicKey, imported);
+  }
+  return imported;
+};
+var activeSealingKey = DEFAULT_SEALING_KEY;
+var sealProviderKey = async (providerApiKey, puckApiKey) => {
+  const sealingKey = activeSealingKey;
+  if (typeof crypto === "undefined" || !crypto.subtle) {
+    throw new Error(
+      "BYOK requires the WebCrypto API (Node 18+ or an edge runtime) to encrypt the provider key"
+    );
+  }
+  const encoder = new TextEncoder();
+  const plaintext = encoder.encode(providerApiKey);
+  if (plaintext.length > MAX_PLAINTEXT_BYTES) {
+    throw new Error(
+      `Provider API key is too long to seal (${plaintext.length} bytes, max ${MAX_PLAINTEXT_BYTES})`
+    );
+  }
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "RSA-OAEP", label: encoder.encode(puckApiKey) },
+    await importPublicKey(sealingKey.publicKey),
+    plaintext
+  );
+  return `v1.${sealingKey.kid}.${toBase64(new Uint8Array(ciphertext))}`;
+};
+
 // src/lib/get-api-key.ts
 init_react_import();
 var getApiKey = () => process.env.PUCK_API_KEY;
@@ -22183,7 +22239,7 @@ async function* iterateSSE(body) {
 
 // src/lib/cloud-api.ts
 var DEFAULT_API_VERSION = "v2";
-var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.dc11b4e2" : "unknown";
+var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.fdb02235" : "unknown";
 var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
   const {
     ai = {},
@@ -22196,13 +22252,21 @@ var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
       "No Puck API key specified. Set the PUCK_API_KEY environment variable, or provide one to the function"
     );
   }
-  const { context, tools = {}, designMode } = ai;
+  const { context, tools = {}, designMode, model, providerOptions } = ai;
+  const providerApiKey = model ? ai.providerApiKey ?? process.env.OPENAI_API_KEY : void 0;
+  if (model && !providerApiKey) {
+    throw new Error(
+      `No provider API key found for "${model}". Please provide one via the providerApiKey parameter.`
+    );
+  }
+  const sealedProviderKey = providerApiKey ? await sealProviderKey(providerApiKey, apiKey) : void 0;
   const res = await fetch(`${host}/${path}`, {
     headers: {
       "x-api-key": apiKey,
       "puck-api-version": apiVersion,
       "x-puck-cloud-client-version": CLOUD_CLIENT_VERSION,
-      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {}
+      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {},
+      ...sealedProviderKey ? { "x-puck-provider-key": sealedProviderKey } : {}
     },
     method: "post",
     body: JSON.stringify({
@@ -22211,7 +22275,8 @@ var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
       tools: prepareUserTools(tools),
       ...designMode ? {
         designMode
-      } : {}
+      } : {},
+      ...model ? { byok: { model, providerOptions } } : {}
     })
   });
   if (!res.body) {
@@ -22284,24 +22349,35 @@ async function generate({
   pageData,
   context,
   tools,
+  mode,
+  designMode,
   apiKey,
   host,
-  onFinish
+  onFinish,
+  model,
+  providerApiKey,
+  providerOptions
 }) {
   let result = null;
-  const options = { ai: { context, tools }, apiKey, host };
-  await cloudApi("generate", { prompt, config: config2, pageData }, options, (chunk) => {
-    if (chunk.type === "data-page") {
-      result = chunk.data;
-    } else if (chunk.type === "data-finish") {
-      onFinish?.(chunk.data);
-    } else if (chunk.type === "error") {
-      throw new Error(chunk.errorText);
+  const options = {
+    ai: { context, tools, designMode, model, providerApiKey, providerOptions },
+    apiKey,
+    host
+  };
+  await cloudApi(
+    "generate",
+    { prompt, config: config2, pageData, mode },
+    options,
+    (chunk) => {
+      if (chunk.type === "data-page") {
+        result = chunk.data;
+      } else if (chunk.type === "data-finish") {
+        onFinish?.(chunk.data);
+      } else if (chunk.type === "error") {
+        throw new Error(chunk.errorText);
+      }
     }
-  });
-  if (result === null) {
-    throw new Error("Puck generate did not return any data");
-  }
+  );
   return result;
 }
 

package/dist/experimental.d.mts

@@ -1,6 +1,8 @@
 import { PuckCloudOptions as PuckCloudOptions$1 } from './index.mjs';
-export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.mjs';
+export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, PuckAiModel, PuckAiProviderOptions, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.mjs';
 import { Data } from '@puckeditor/core';
+import '@ai-sdk/provider';
+import '@ai-sdk/provider-utils';
 import 'zod/v4';
 import 'ai';
 

package/dist/experimental.d.ts

@@ -1,6 +1,8 @@
 import { PuckCloudOptions as PuckCloudOptions$1 } from './index.js';
-export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.js';
+export { ChatParams, DesignModeOptions, Endpoint, GenerateParams, OnFinishCallback, OnFinishResult, PuckAiModel, PuckAiProviderOptions, UserTool, UserToolRegistry, chat, endpoints, generate, tool } from './index.js';
 import { Data } from '@puckeditor/core';
+import '@ai-sdk/provider';
+import '@ai-sdk/provider-utils';
 import 'zod/v4';
 import 'ai';
 

package/dist/experimental.js

@@ -22156,6 +22156,62 @@ var prepareUserTools = (toolRegistry) => Object.keys(toolRegistry).reduce(
   {}
 );
 
+// src/lib/seal-provider-key.ts
+init_react_import();
+var DEFAULT_SEALING_KEY = {
+  kid: "puck-2026-07",
+  publicKey: "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"
+};
+var MAX_PLAINTEXT_BYTES = 446;
+var fromBase64 = (b64) => {
+  const binary = atob(b64);
+  const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+};
+var toBase64 = (bytes) => {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary);
+};
+var importCache = /* @__PURE__ */ new Map();
+var importPublicKey = (publicKey) => {
+  let imported = importCache.get(publicKey);
+  if (!imported) {
+    imported = crypto.subtle.importKey(
+      "spki",
+      fromBase64(publicKey),
+      { name: "RSA-OAEP", hash: "SHA-256" },
+      false,
+      ["encrypt"]
+    );
+    importCache.set(publicKey, imported);
+  }
+  return imported;
+};
+var activeSealingKey = DEFAULT_SEALING_KEY;
+var sealProviderKey = async (providerApiKey, puckApiKey) => {
+  const sealingKey = activeSealingKey;
+  if (typeof crypto === "undefined" || !crypto.subtle) {
+    throw new Error(
+      "BYOK requires the WebCrypto API (Node 18+ or an edge runtime) to encrypt the provider key"
+    );
+  }
+  const encoder = new TextEncoder();
+  const plaintext = encoder.encode(providerApiKey);
+  if (plaintext.length > MAX_PLAINTEXT_BYTES) {
+    throw new Error(
+      `Provider API key is too long to seal (${plaintext.length} bytes, max ${MAX_PLAINTEXT_BYTES})`
+    );
+  }
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "RSA-OAEP", label: encoder.encode(puckApiKey) },
+    await importPublicKey(sealingKey.publicKey),
+    plaintext
+  );
+  return `v1.${sealingKey.kid}.${toBase64(new Uint8Array(ciphertext))}`;
+};
+
 // src/lib/get-api-key.ts
 init_react_import();
 var getApiKey = () => process.env.PUCK_API_KEY;
@@ -22226,7 +22282,7 @@ async function* iterateSSE(body) {
 
 // src/lib/cloud-api.ts
 var DEFAULT_API_VERSION = "v2";
-var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.dc11b4e2" : "unknown";
+var CLOUD_CLIENT_VERSION = true ? "0.8.0-canary.fdb02235" : "unknown";
 var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
   const {
     ai = {},
@@ -22239,13 +22295,21 @@ var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
       "No Puck API key specified. Set the PUCK_API_KEY environment variable, or provide one to the function"
     );
   }
-  const { context, tools = {}, designMode } = ai;
+  const { context, tools = {}, designMode, model, providerOptions } = ai;
+  const providerApiKey = model ? ai.providerApiKey ?? process.env.OPENAI_API_KEY : void 0;
+  if (model && !providerApiKey) {
+    throw new Error(
+      `No provider API key found for "${model}". Please provide one via the providerApiKey parameter.`
+    );
+  }
+  const sealedProviderKey = providerApiKey ? await sealProviderKey(providerApiKey, apiKey) : void 0;
   const res = await fetch(`${host}/${path}`, {
     headers: {
       "x-api-key": apiKey,
       "puck-api-version": apiVersion,
       "x-puck-cloud-client-version": CLOUD_CLIENT_VERSION,
-      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {}
+      ...forwardHeaders?.pluginAiVersion ? { "x-puck-plugin-ai-version": forwardHeaders.pluginAiVersion } : {},
+      ...sealedProviderKey ? { "x-puck-provider-key": sealedProviderKey } : {}
     },
     method: "post",
     body: JSON.stringify({
@@ -22254,7 +22318,8 @@ var cloudApi = async (path, body, options = {}, onChunk, forwardHeaders) => {
       tools: prepareUserTools(tools),
       ...designMode ? {
         designMode
-      } : {}
+      } : {},
+      ...model ? { byok: { model, providerOptions } } : {}
     })
   });
   if (!res.body) {
@@ -22813,24 +22878,35 @@ async function generate({
   pageData,
   context,
   tools,
+  mode,
+  designMode,
   apiKey,
   host,
-  onFinish
+  onFinish,
+  model,
+  providerApiKey,
+  providerOptions
 }) {
   let result = null;
-  const options = { ai: { context, tools }, apiKey, host };
-  await cloudApi("generate", { prompt, config: config2, pageData }, options, (chunk) => {
-    if (chunk.type === "data-page") {
-      result = chunk.data;
-    } else if (chunk.type === "data-finish") {
-      onFinish?.(chunk.data);
-    } else if (chunk.type === "error") {
-      throw new Error(chunk.errorText);
+  const options = {
+    ai: { context, tools, designMode, model, providerApiKey, providerOptions },
+    apiKey,
+    host
+  };
+  await cloudApi(
+    "generate",
+    { prompt, config: config2, pageData, mode },
+    options,
+    (chunk) => {
+      if (chunk.type === "data-page") {
+        result = chunk.data;
+      } else if (chunk.type === "data-finish") {
+        onFinish?.(chunk.data);
+      } else if (chunk.type === "error") {
+        throw new Error(chunk.errorText);
+      }
     }
-  });
-  if (result === null) {
-    throw new Error("Puck generate did not return any data");
-  }
+  );
   return result;
 }
 

package/dist/experimental.mjs

@@ -11,7 +11,7 @@ import {
   getAttachment,
   handlePuckRequest,
   tool
-} from "./chunk-N6PJ6YM6.mjs";
+} from "./chunk-Q3KHF34V.mjs";
 import {
   init_react_import
 } from "./chunk-O6DC5HI2.mjs";