@tanstack/ai-client 0.30.0 → 0.31.1

package/README.md

@@ -202,19 +202,20 @@ Learn more in the
 
 Official adapters include:
 
-| Package                                                                              | Use it for                                                                     |
-| ------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------ |
-| [`@tanstack/ai-openrouter`](https://tanstack.com/ai/latest/docs/adapters/openrouter) | 300+ models through one OpenRouter API, with per-request cost tracking         |
-| [`@tanstack/ai-openai`](https://tanstack.com/ai/latest/docs/adapters/openai)         | OpenAI chat, image, video, speech, transcription, realtime, and provider tools |
-| [`@tanstack/ai-anthropic`](https://tanstack.com/ai/latest/docs/adapters/anthropic)   | Anthropic Claude chat, thinking, tools, structured outputs, and Vertex Claude  |
-| [`@tanstack/ai-gemini`](https://tanstack.com/ai/latest/docs/adapters/gemini)         | Google Gemini chat, image, speech, and audio generation                        |
-| [`@tanstack/ai-vertex`](https://tanstack.com/ai/latest/docs/adapters/vertex)         | Gemini on Vertex AI with regional endpoints and Google Cloud credentials       |
-| [`@tanstack/ai-ollama`](https://tanstack.com/ai/latest/docs/adapters/ollama)         | Local Ollama models                                                            |
-| [`@tanstack/ai-grok`](https://tanstack.com/ai/latest/docs/adapters/grok)             | xAI Grok chat, images, and realtime                                            |
-| [`@tanstack/ai-groq`](https://tanstack.com/ai/latest/docs/adapters/groq)             | Groq low-latency inference                                                     |
-| [`@tanstack/ai-elevenlabs`](https://tanstack.com/ai/latest/docs/adapters/elevenlabs) | ElevenLabs realtime voice, speech, transcription, music, and sound effects     |
-| [`@tanstack/ai-byteplus`](https://tanstack.com/ai/latest/docs/adapters/byteplus)     | BytePlus Seed chat, Seedance video, Seedream image, and Seed Speech TTS/ASR    |
-| [`@tanstack/ai-fal`](https://tanstack.com/ai/latest/docs/adapters/fal)               | fal.ai image, video, audio, speech, and transcription models                   |
+| Package                                                                              | Use it for                                                                           |
+| ------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------ |
+| [`@tanstack/ai-openrouter`](https://tanstack.com/ai/latest/docs/adapters/openrouter) | 300+ models through one OpenRouter API, with per-request cost tracking               |
+| [`@tanstack/ai-openai`](https://tanstack.com/ai/latest/docs/adapters/openai)         | OpenAI chat, image, video, speech, transcription, realtime, and provider tools       |
+| [`@tanstack/ai-anthropic`](https://tanstack.com/ai/latest/docs/adapters/anthropic)   | Anthropic Claude chat, thinking, tools, structured outputs, and Vertex Claude        |
+| [`@tanstack/ai-gemini`](https://tanstack.com/ai/latest/docs/adapters/gemini)         | Google Gemini chat, image, speech, and audio generation                              |
+| [`@tanstack/ai-vertex`](https://tanstack.com/ai/latest/docs/adapters/vertex)         | Gemini on Vertex AI with regional endpoints and Google Cloud credentials             |
+| [`@tanstack/ai-ollama`](https://tanstack.com/ai/latest/docs/adapters/ollama)         | Local Ollama models                                                                  |
+| [`@tanstack/ai-grok`](https://tanstack.com/ai/latest/docs/adapters/grok)             | xAI Grok chat, images, and realtime                                                  |
+| [`@tanstack/ai-groq`](https://tanstack.com/ai/latest/docs/adapters/groq)             | Groq low-latency inference                                                           |
+| [`@tanstack/ai-elevenlabs`](https://tanstack.com/ai/latest/docs/adapters/elevenlabs) | ElevenLabs realtime voice, speech, transcription, music, and sound effects           |
+| [`@tanstack/ai-byteplus`](https://tanstack.com/ai/latest/docs/adapters/byteplus)     | BytePlus Seed chat, Seedance video, Seedream image, and Seed Speech TTS/ASR          |
+| [`@tanstack/ai-fal`](https://tanstack.com/ai/latest/docs/adapters/fal)               | fal.ai image, video, audio, speech, and transcription models                         |
+| [`@tanstack/ai-cloudflare`](https://tanstack.com/ai/latest/docs/adapters/cloudflare) | Cloudflare Workers AI chat, embeddings, image, speech, transcription, and AI Gateway |
 
 The adapter system is tree-shakeable by activity. Import `openaiText` for chat,
 `openaiImage` for images, `falVideo` for video, `geminiSpeech` for TTS, and so

package/dist/esm/byok/client.d.ts

@@ -1,4 +1,4 @@
-import { ProviderId } from '@tanstack/ai/byok';
+import { ByokProvider, ProviderId } from '@tanstack/ai/byok';
 import { Keyring, KeyringStorage } from './storage.js';
 export type KeyStatus = {
     state: 'empty';
@@ -25,6 +25,11 @@ export type ByokSnapshot = {
 };
 export interface DefineByokOptions {
     storage?: KeyringStorage;
+    /**
+     * Descriptors whose `with` companions the store expands: `headers()` and
+     * `prepare()` for such a provider cover its companions too.
+     */
+    providers?: ReadonlyArray<ByokProvider>;
 }
 export declare const EMPTY_BYOK_SNAPSHOT: ByokSnapshot;
 export declare class ByokClient {

package/dist/esm/byok/client.js

@@ -37,12 +37,14 @@ var ByokClient = class {
 	#prompt = null;
 	#coverageAll = false;
 	#coverage = {};
+	#companions = {};
 	#listeners = /* @__PURE__ */ new Set();
 	#snapshot;
 	#storageError = null;
 	#ready;
 	constructor(options = {}) {
 		this.storage = options.storage ?? memoryStorage();
+		for (const provider of options.providers ?? []) if (provider.with?.length) this.#companions[requireProviderId(provider.id)] = provider.with.map((companion) => requireProviderId(companion.id));
 		this.#locked = Boolean(this.storage.unlockable);
 		this.#snapshot = this.#buildSnapshot();
 		this.#ready = this.#hydrate();
@@ -94,12 +96,18 @@ var ByokClient = class {
 	#hasCoverage(provider) {
 		return this.#coverageAll || this.#coverage[provider] === true;
 	}
+	/** The slug plus every companion declared on its descriptor. */
+	#expand(provider) {
+		return [provider, ...this.#companions[provider] ?? []];
+	}
 	headers(provider) {
 		const headers = {};
 		if (provider) {
 			requireProviderId(provider);
-			const key = this.#keys[provider];
-			if (key) headers[byokHeaderName(provider)] = key;
+			for (const id of this.#expand(provider)) {
+				const key = this.#keys[id];
+				if (key) headers[byokHeaderName(id)] = key;
+			}
 			return headers;
 		}
 		for (const [id, key] of Object.entries(this.#keys)) if (key) headers[byokHeaderName(id)] = key;
@@ -110,10 +118,11 @@ var ByokClient = class {
 		if (this.storage.unlockable && this.#locked) await this.unlock();
 		if (!provider) return;
 		requireProviderId(provider);
-		if (this.#keys[provider]) return;
-		if (this.#hasCoverage(provider)) return;
-		this.request(provider, "missing");
-		throw new ByokBlockedError(provider, "missing");
+		for (const id of this.#expand(provider)) {
+			if (this.#keys[id] || this.#hasCoverage(id)) continue;
+			this.request(id, "missing");
+			throw new ByokBlockedError(id, "missing");
+		}
 	}
 	async update(providerOrKey, key) {
 		await this.#ready;

package/dist/esm/byok/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","names":["#listeners","#ready","#locked","#snapshot","#buildSnapshot","#hydrate","#statuses","#prompt","#storageError","#keys","#emit","#coverageAll","#coverage","#hasCoverage","#lockedProvider"],"sources":["../../../src/byok/client.ts"],"sourcesContent":["import {\n  ByokBlockedError,\n  byokHeaderName,\n  isProviderId,\n  maskKey,\n} from '@tanstack/ai/byok'\nimport { memoryStorage } from './storage'\nimport type { ProviderId } from '@tanstack/ai/byok'\nimport type { Keyring, KeyringStorage } from './storage'\n\nexport type KeyStatus =\n  | { state: 'empty' }\n  | { state: 'set'; masked: string }\n  | { state: 'locked'; masked: string }\n  | { state: 'error'; masked: string; message: string }\n\nexport type ByokPrompt = {\n  provider: ProviderId\n  reason: 'missing' | 'locked'\n}\n\nexport type ByokSnapshot = {\n  status: Partial<Record<string, KeyStatus>>\n  locked: boolean\n  prompt: ByokPrompt | null\n  storageError: string | null\n}\n\nexport interface DefineByokOptions {\n  storage?: KeyringStorage\n}\n\nexport const EMPTY_BYOK_SNAPSHOT: ByokSnapshot = {\n  status: {},\n  locked: false,\n  prompt: null,\n  storageError: null,\n}\n\nfunction requireProviderId(value: string): ProviderId {\n  if (!isProviderId(value)) {\n    throw new Error(`Invalid BYOK provider id: ${value}`)\n  }\n  return value\n}\n\nfunction errorMessage(error: unknown, fallback: string): string {\n  return error instanceof Error && error.message.length > 0\n    ? error.message\n    : fallback\n}\n\nfunction isByokCeremonyCancel(error: unknown): boolean {\n  if (\n    typeof DOMException !== 'undefined' &&\n    error instanceof DOMException &&\n    error.name === 'NotAllowedError'\n  ) {\n    return true\n  }\n  if (error instanceof Error) {\n    if (error.name === 'NotAllowedError') return true\n    const message = error.message.toLowerCase()\n    return message.includes('cancelled') || message.includes('not allowed')\n  }\n  return false\n}\n\nfunction sanitizeKeyring(value: unknown): Keyring {\n  if (typeof value !== 'object' || value === null) return {}\n  const keys: Keyring = {}\n  for (const [provider, key] of Object.entries(value)) {\n    if (isProviderId(provider) && typeof key === 'string' && key.length > 0) {\n      keys[provider] = key\n    }\n  }\n  return keys\n}\n\nexport class ByokClient {\n  readonly storage: KeyringStorage\n  #keys: Keyring = {}\n  #statuses: Partial<Record<string, KeyStatus>> = {}\n  #locked: boolean\n  #prompt: ByokPrompt | null = null\n  #coverageAll = false\n  #coverage: Record<string, boolean> = {}\n  readonly #listeners = new Set<() => void>()\n  #snapshot: ByokSnapshot\n  #storageError: string | null = null\n  readonly #ready: Promise<void>\n\n  constructor(options: DefineByokOptions = {}) {\n    this.storage = options.storage ?? memoryStorage()\n    this.#locked = Boolean(this.storage.unlockable)\n    this.#snapshot = this.#buildSnapshot()\n    this.#ready = this.#hydrate()\n  }\n\n  /** Resolves when constructor hydration (peek/load) finishes. */\n  ready = (): Promise<void> => this.#ready\n\n  subscribe = (listener: () => void): (() => void) => {\n    this.#listeners.add(listener)\n    return () => {\n      this.#listeners.delete(listener)\n    }\n  }\n\n  getSnapshot = (): ByokSnapshot => this.#snapshot\n\n  #buildSnapshot(): ByokSnapshot {\n    return {\n      status: { ...this.#statuses },\n      locked: this.#locked,\n      prompt: this.#prompt,\n      storageError: this.#storageError,\n    }\n  }\n\n  keys(): Keyring {\n    return { ...this.#keys }\n  }\n\n  request(provider: ProviderId, reason: ByokPrompt['reason']): void {\n    this.#prompt = { provider: requireProviderId(provider), reason }\n    this.#emit()\n  }\n\n  /**\n   * `true` — the server can fill any slug from env.\n   * `false` — no env coverage.\n   * A record merges per-id flags and clears the all/none boolean.\n   */\n  setServerCoverage(flags: boolean | Readonly<Record<string, boolean>>): void {\n    if (typeof flags === 'boolean') {\n      this.#coverageAll = flags\n      this.#coverage = {}\n      return\n    }\n    this.#coverageAll = false\n    this.#coverage = { ...this.#coverage, ...flags }\n  }\n\n  #hasCoverage(provider: string): boolean {\n    return this.#coverageAll || this.#coverage[provider] === true\n  }\n\n  headers(provider?: ProviderId): Record<string, string> {\n    const headers: Record<string, string> = {}\n    if (provider) {\n      requireProviderId(provider)\n      const key = this.#keys[provider]\n      if (key) headers[byokHeaderName(provider)] = key\n      return headers\n    }\n    for (const [id, key] of Object.entries(this.#keys)) {\n      if (key) headers[byokHeaderName(id)] = key\n    }\n    return headers\n  }\n\n  async prepare(provider?: ProviderId): Promise<void> {\n    await this.#ready\n    if (this.storage.unlockable && this.#locked) {\n      await this.unlock()\n    }\n    if (!provider) return\n    requireProviderId(provider)\n    if (this.#keys[provider]) return\n    if (this.#hasCoverage(provider)) return\n    this.request(provider, 'missing')\n    throw new ByokBlockedError(provider, 'missing')\n  }\n\n  async update(\n    providerOrKey: ProviderId | string,\n    key?: string,\n  ): Promise<void> {\n    await this.#ready\n    let provider: ProviderId\n    let nextKey: string\n    if (key === undefined) {\n      if (!this.#prompt) {\n        throw new Error('byok.update(key) cannot run when prompt is null')\n      }\n      provider = this.#prompt.provider\n      nextKey = providerOrKey\n    } else {\n      provider = requireProviderId(providerOrKey)\n      nextKey = key\n    }\n    nextKey = nextKey.trim()\n    if (nextKey.length === 0) {\n      throw new Error('BYOK key must be non-empty')\n    }\n    if (this.storage.unlockable && this.#locked) {\n      await this.unlock()\n    }\n    const previousKeys = this.#keys\n    const previousStatuses = { ...this.#statuses }\n    const previousLocked = this.#locked\n    const previousPrompt = this.#prompt\n    const previousStorageError = this.#storageError\n    const next = { ...this.#keys, [provider]: nextKey }\n    try {\n      await this.storage.save(next)\n    } catch (error) {\n      this.#keys = previousKeys\n      this.#statuses = previousStatuses\n      this.#locked = previousLocked\n      this.#prompt = previousPrompt\n      this.#storageError = previousStorageError\n      this.#statuses[provider] = {\n        state: 'error',\n        masked: maskKey(nextKey),\n        message: errorMessage(error, `Failed to persist ${provider} key`),\n      }\n      this.#emit()\n      throw error\n    }\n    this.#keys = next\n    this.#statuses[provider] = { state: 'set', masked: maskKey(nextKey) }\n    this.#locked = false\n    this.#prompt = null\n    this.#storageError = null\n    this.#emit()\n  }\n\n  async clear(provider?: ProviderId): Promise<void> {\n    await this.#ready\n    if (provider) {\n      requireProviderId(provider)\n      if (this.storage.unlockable && this.#locked) {\n        await this.unlock()\n      }\n      const previousKeys = this.#keys\n      const previousStatuses = { ...this.#statuses }\n      const next = { ...this.#keys }\n      delete next[provider]\n      try {\n        await this.storage.save(next)\n      } catch (error) {\n        this.#keys = previousKeys\n        this.#statuses = previousStatuses\n        this.#emit()\n        throw error\n      }\n      this.#keys = next\n      delete this.#statuses[provider]\n      this.#emit()\n      return\n    }\n    const previousKeys = this.#keys\n    const previousStatuses = this.#statuses\n    const previousLocked = this.#locked\n    const previousPrompt = this.#prompt\n    try {\n      await this.storage.clear()\n    } catch (error) {\n      this.#keys = previousKeys\n      this.#statuses = previousStatuses\n      this.#locked = previousLocked\n      this.#prompt = previousPrompt\n      this.#emit()\n      throw error\n    }\n    this.#keys = {}\n    this.#statuses = {}\n    this.#locked = false\n    this.#prompt = null\n    this.#storageError = null\n    this.#emit()\n  }\n\n  async unlock(): Promise<void> {\n    await this.#ready\n    if (!this.storage.unlockable) return\n    try {\n      const loaded = sanitizeKeyring(await this.storage.load())\n      this.#keys = { ...loaded, ...this.#keys }\n      for (const [id, value] of Object.entries(loaded)) {\n        if (!isProviderId(id) || !value) continue\n        const existing = this.#statuses[id]\n        if (!existing || existing.state === 'locked') {\n          this.#statuses[id] = { state: 'set', masked: maskKey(value) }\n        }\n      }\n      this.#locked = false\n      this.#storageError = null\n      this.#emit()\n    } catch (error) {\n      if (isByokCeremonyCancel(error)) {\n        const provider = this.#lockedProvider()\n        if (provider) {\n          this.request(provider, 'locked')\n          throw new ByokBlockedError(provider, 'locked')\n        }\n      }\n      this.#storageError = errorMessage(error, 'Failed to unlock keyring')\n      this.#emit()\n      throw error instanceof Error ? error : new Error(String(error))\n    }\n  }\n\n  #lockedProvider(): ProviderId | undefined {\n    if (this.#prompt && isProviderId(this.#prompt.provider)) {\n      return this.#prompt.provider\n    }\n    for (const [id, status] of Object.entries(this.#statuses)) {\n      if (status?.state === 'locked' && isProviderId(id)) return id\n    }\n    return undefined\n  }\n\n  async #hydrate(): Promise<void> {\n    if (this.storage.unlockable) {\n      if (!this.storage.peek) return\n      try {\n        const preview = await this.storage.peek()\n        for (const [id, last4] of Object.entries(preview)) {\n          if (!isProviderId(id) || this.#statuses[id]) continue\n          this.#statuses[id] = {\n            state: 'locked',\n            masked: last4 ? last4 : '••',\n          }\n        }\n        this.#locked = Object.keys(preview).length > 0\n        this.#storageError = null\n        this.#emit()\n      } catch (error) {\n        this.#storageError = errorMessage(error, 'Failed to read keyring')\n        this.#emit()\n      }\n      return\n    }\n    try {\n      const loaded = sanitizeKeyring(await this.storage.load())\n      this.#keys = { ...loaded, ...this.#keys }\n      for (const [id, value] of Object.entries(loaded)) {\n        if (!isProviderId(id) || !value) continue\n        this.#statuses[id] = { state: 'set', masked: maskKey(value) }\n      }\n      this.#storageError = null\n      this.#emit()\n    } catch (error) {\n      this.#storageError = errorMessage(error, 'Failed to read keyring')\n      this.#emit()\n    }\n  }\n\n  #emit(): void {\n    this.#snapshot = this.#buildSnapshot()\n    for (const listener of this.#listeners) listener()\n  }\n}\n\nexport function defineByok(options: DefineByokOptions = {}): ByokClient {\n  return new ByokClient(options)\n}\n"],"mappings":";;;AAgCA,IAAa,sBAAoC;CAC/C,QAAQ,CAAC;CACT,QAAQ;CACR,QAAQ;CACR,cAAc;AAChB;AAEA,SAAS,kBAAkB,OAA2B;CACpD,IAAI,CAAC,aAAa,KAAK,GACrB,MAAM,IAAI,MAAM,6BAA6B,OAAO;CAEtD,OAAO;AACT;AAEA,SAAS,aAAa,OAAgB,UAA0B;CAC9D,OAAO,iBAAiB,SAAS,MAAM,QAAQ,SAAS,IACpD,MAAM,UACN;AACN;AAEA,SAAS,qBAAqB,OAAyB;CACrD,IACE,OAAO,iBAAiB,eACxB,iBAAiB,gBACjB,MAAM,SAAS,mBAEf,OAAO;CAET,IAAI,iBAAiB,OAAO;EAC1B,IAAI,MAAM,SAAS,mBAAmB,OAAO;EAC7C,MAAM,UAAU,MAAM,QAAQ,YAAY;EAC1C,OAAO,QAAQ,SAAS,WAAW,KAAK,QAAQ,SAAS,aAAa;CACxE;CACA,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAyB;CAChD,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,CAAC;CACzD,MAAM,OAAgB,CAAC;CACvB,KAAK,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,KAAK,GAChD,IAAI,aAAa,QAAQ,KAAK,OAAO,QAAQ,YAAY,IAAI,SAAS,GACpE,KAAK,YAAY;CAGrB,OAAO;AACT;AAEA,IAAa,aAAb,MAAwB;CACtB;CACA,QAAiB,CAAC;CAClB,YAAgD,CAAC;CACjD;CACA,UAA6B;CAC7B,eAAe;CACf,YAAqC,CAAC;CACtC,6BAAsB,IAAI,IAAgB;CAC1C;CACA,gBAA+B;CAC/B;CAEA,YAAY,UAA6B,CAAC,GAAG;EAC3C,KAAK,UAAU,QAAQ,WAAW,cAAc;EAChD,KAAKE,UAAU,QAAQ,KAAK,QAAQ,UAAU;EAC9C,KAAKC,YAAY,KAAKC,eAAe;EACrC,KAAKH,SAAS,KAAKI,SAAS;CAC9B;;CAGA,cAA6B,KAAKJ;CAElC,aAAa,aAAuC;EAClD,KAAKD,WAAW,IAAI,QAAQ;EAC5B,aAAa;GACX,KAAKA,WAAW,OAAO,QAAQ;EACjC;CACF;CAEA,oBAAkC,KAAKG;CAEvC,iBAA+B;EAC7B,OAAO;GACL,QAAQ,EAAE,GAAG,KAAKG,UAAU;GAC5B,QAAQ,KAAKJ;GACb,QAAQ,KAAKK;GACb,cAAc,KAAKC;EACrB;CACF;CAEA,OAAgB;EACd,OAAO,EAAE,GAAG,KAAKC,MAAM;CACzB;CAEA,QAAQ,UAAsB,QAAoC;EAChE,KAAKF,UAAU;GAAE,UAAU,kBAAkB,QAAQ;GAAG;EAAO;EAC/D,KAAKG,MAAM;CACb;;;;;;CAOA,kBAAkB,OAA0D;EAC1E,IAAI,OAAO,UAAU,WAAW;GAC9B,KAAKC,eAAe;GACpB,KAAKC,YAAY,CAAC;GAClB;EACF;EACA,KAAKD,eAAe;EACpB,KAAKC,YAAY;GAAE,GAAG,KAAKA;GAAW,GAAG;EAAM;CACjD;CAEA,aAAa,UAA2B;EACtC,OAAO,KAAKD,gBAAgB,KAAKC,UAAU,cAAc;CAC3D;CAEA,QAAQ,UAA+C;EACrD,MAAM,UAAkC,CAAC;EACzC,IAAI,UAAU;GACZ,kBAAkB,QAAQ;GAC1B,MAAM,MAAM,KAAKH,MAAM;GACvB,IAAI,KAAK,QAAQ,eAAe,QAAQ,KAAK;GAC7C,OAAO;EACT;EACA,KAAK,MAAM,CAAC,IAAI,QAAQ,OAAO,QAAQ,KAAKA,KAAK,GAC/C,IAAI,KAAK,QAAQ,eAAe,EAAE,KAAK;EAEzC,OAAO;CACT;CAEA,MAAM,QAAQ,UAAsC;EAClD,MAAM,KAAKR;EACX,IAAI,KAAK,QAAQ,cAAc,KAAKC,SAClC,MAAM,KAAK,OAAO;EAEpB,IAAI,CAAC,UAAU;EACf,kBAAkB,QAAQ;EAC1B,IAAI,KAAKO,MAAM,WAAW;EAC1B,IAAI,KAAKI,aAAa,QAAQ,GAAG;EACjC,KAAK,QAAQ,UAAU,SAAS;EAChC,MAAM,IAAI,iBAAiB,UAAU,SAAS;CAChD;CAEA,MAAM,OACJ,eACA,KACe;EACf,MAAM,KAAKZ;EACX,IAAI;EACJ,IAAI;EACJ,IAAI,QAAQ,KAAA,GAAW;GACrB,IAAI,CAAC,KAAKM,SACR,MAAM,IAAI,MAAM,iDAAiD;GAEnE,WAAW,KAAKA,QAAQ;GACxB,UAAU;EACZ,OAAO;GACL,WAAW,kBAAkB,aAAa;GAC1C,UAAU;EACZ;EACA,UAAU,QAAQ,KAAK;EACvB,IAAI,QAAQ,WAAW,GACrB,MAAM,IAAI,MAAM,4BAA4B;EAE9C,IAAI,KAAK,QAAQ,cAAc,KAAKL,SAClC,MAAM,KAAK,OAAO;EAEpB,MAAM,eAAe,KAAKO;EAC1B,MAAM,mBAAmB,EAAE,GAAG,KAAKH,UAAU;EAC7C,MAAM,iBAAiB,KAAKJ;EAC5B,MAAM,iBAAiB,KAAKK;EAC5B,MAAM,uBAAuB,KAAKC;EAClC,MAAM,OAAO;GAAE,GAAG,KAAKC;IAAQ,WAAW;EAAQ;EAClD,IAAI;GACF,MAAM,KAAK,QAAQ,KAAK,IAAI;EAC9B,SAAS,OAAO;GACd,KAAKA,QAAQ;GACb,KAAKH,YAAY;GACjB,KAAKJ,UAAU;GACf,KAAKK,UAAU;GACf,KAAKC,gBAAgB;GACrB,KAAKF,UAAU,YAAY;IACzB,OAAO;IACP,QAAQ,QAAQ,OAAO;IACvB,SAAS,aAAa,OAAO,qBAAqB,SAAS,KAAK;GAClE;GACA,KAAKI,MAAM;GACX,MAAM;EACR;EACA,KAAKD,QAAQ;EACb,KAAKH,UAAU,YAAY;GAAE,OAAO;GAAO,QAAQ,QAAQ,OAAO;EAAE;EACpE,KAAKJ,UAAU;EACf,KAAKK,UAAU;EACf,KAAKC,gBAAgB;EACrB,KAAKE,MAAM;CACb;CAEA,MAAM,MAAM,UAAsC;EAChD,MAAM,KAAKT;EACX,IAAI,UAAU;GACZ,kBAAkB,QAAQ;GAC1B,IAAI,KAAK,QAAQ,cAAc,KAAKC,SAClC,MAAM,KAAK,OAAO;GAEpB,MAAM,eAAe,KAAKO;GAC1B,MAAM,mBAAmB,EAAE,GAAG,KAAKH,UAAU;GAC7C,MAAM,OAAO,EAAE,GAAG,KAAKG,MAAM;GAC7B,OAAO,KAAK;GACZ,IAAI;IACF,MAAM,KAAK,QAAQ,KAAK,IAAI;GAC9B,SAAS,OAAO;IACd,KAAKA,QAAQ;IACb,KAAKH,YAAY;IACjB,KAAKI,MAAM;IACX,MAAM;GACR;GACA,KAAKD,QAAQ;GACb,OAAO,KAAKH,UAAU;GACtB,KAAKI,MAAM;GACX;EACF;EACA,MAAM,eAAe,KAAKD;EAC1B,MAAM,mBAAmB,KAAKH;EAC9B,MAAM,iBAAiB,KAAKJ;EAC5B,MAAM,iBAAiB,KAAKK;EAC5B,IAAI;GACF,MAAM,KAAK,QAAQ,MAAM;EAC3B,SAAS,OAAO;GACd,KAAKE,QAAQ;GACb,KAAKH,YAAY;GACjB,KAAKJ,UAAU;GACf,KAAKK,UAAU;GACf,KAAKG,MAAM;GACX,MAAM;EACR;EACA,KAAKD,QAAQ,CAAC;EACd,KAAKH,YAAY,CAAC;EAClB,KAAKJ,UAAU;EACf,KAAKK,UAAU;EACf,KAAKC,gBAAgB;EACrB,KAAKE,MAAM;CACb;CAEA,MAAM,SAAwB;EAC5B,MAAM,KAAKT;EACX,IAAI,CAAC,KAAK,QAAQ,YAAY;EAC9B,IAAI;GACF,MAAM,SAAS,gBAAgB,MAAM,KAAK,QAAQ,KAAK,CAAC;GACxD,KAAKQ,QAAQ;IAAE,GAAG;IAAQ,GAAG,KAAKA;GAAM;GACxC,KAAK,MAAM,CAAC,IAAI,UAAU,OAAO,QAAQ,MAAM,GAAG;IAChD,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO;IACjC,MAAM,WAAW,KAAKH,UAAU;IAChC,IAAI,CAAC,YAAY,SAAS,UAAU,UAClC,KAAKA,UAAU,MAAM;KAAE,OAAO;KAAO,QAAQ,QAAQ,KAAK;IAAE;GAEhE;GACA,KAAKJ,UAAU;GACf,KAAKM,gBAAgB;GACrB,KAAKE,MAAM;EACb,SAAS,OAAO;GACd,IAAI,qBAAqB,KAAK,GAAG;IAC/B,MAAM,WAAW,KAAKI,gBAAgB;IACtC,IAAI,UAAU;KACZ,KAAK,QAAQ,UAAU,QAAQ;KAC/B,MAAM,IAAI,iBAAiB,UAAU,QAAQ;IAC/C;GACF;GACA,KAAKN,gBAAgB,aAAa,OAAO,0BAA0B;GACnE,KAAKE,MAAM;GACX,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;EAChE;CACF;CAEA,kBAA0C;EACxC,IAAI,KAAKH,WAAW,aAAa,KAAKA,QAAQ,QAAQ,GACpD,OAAO,KAAKA,QAAQ;EAEtB,KAAK,MAAM,CAAC,IAAI,WAAW,OAAO,QAAQ,KAAKD,SAAS,GACtD,IAAI,QAAQ,UAAU,YAAY,aAAa,EAAE,GAAG,OAAO;CAG/D;CAEA,MAAMD,WAA0B;EAC9B,IAAI,KAAK,QAAQ,YAAY;GAC3B,IAAI,CAAC,KAAK,QAAQ,MAAM;GACxB,IAAI;IACF,MAAM,UAAU,MAAM,KAAK,QAAQ,KAAK;IACxC,KAAK,MAAM,CAAC,IAAI,UAAU,OAAO,QAAQ,OAAO,GAAG;KACjD,IAAI,CAAC,aAAa,EAAE,KAAK,KAAKC,UAAU,KAAK;KAC7C,KAAKA,UAAU,MAAM;MACnB,OAAO;MACP,QAAQ,QAAQ,QAAQ;KAC1B;IACF;IACA,KAAKJ,UAAU,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS;IAC7C,KAAKM,gBAAgB;IACrB,KAAKE,MAAM;GACb,SAAS,OAAO;IACd,KAAKF,gBAAgB,aAAa,OAAO,wBAAwB;IACjE,KAAKE,MAAM;GACb;GACA;EACF;EACA,IAAI;GACF,MAAM,SAAS,gBAAgB,MAAM,KAAK,QAAQ,KAAK,CAAC;GACxD,KAAKD,QAAQ;IAAE,GAAG;IAAQ,GAAG,KAAKA;GAAM;GACxC,KAAK,MAAM,CAAC,IAAI,UAAU,OAAO,QAAQ,MAAM,GAAG;IAChD,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO;IACjC,KAAKH,UAAU,MAAM;KAAE,OAAO;KAAO,QAAQ,QAAQ,KAAK;IAAE;GAC9D;GACA,KAAKE,gBAAgB;GACrB,KAAKE,MAAM;EACb,SAAS,OAAO;GACd,KAAKF,gBAAgB,aAAa,OAAO,wBAAwB;GACjE,KAAKE,MAAM;EACb;CACF;CAEA,QAAc;EACZ,KAAKP,YAAY,KAAKC,eAAe;EACrC,KAAK,MAAM,YAAY,KAAKJ,YAAY,SAAS;CACnD;AACF;AAEA,SAAgB,WAAW,UAA6B,CAAC,GAAe;CACtE,OAAO,IAAI,WAAW,OAAO;AAC/B"}
+{"version":3,"file":"client.js","names":["#companions","#listeners","#ready","#locked","#snapshot","#buildSnapshot","#hydrate","#statuses","#prompt","#storageError","#keys","#emit","#coverageAll","#coverage","#expand","#hasCoverage","#lockedProvider"],"sources":["../../../src/byok/client.ts"],"sourcesContent":["import {\n  ByokBlockedError,\n  byokHeaderName,\n  isProviderId,\n  maskKey,\n} from '@tanstack/ai/byok'\nimport { memoryStorage } from './storage'\nimport type { ByokProvider, ProviderId } from '@tanstack/ai/byok'\nimport type { Keyring, KeyringStorage } from './storage'\n\nexport type KeyStatus =\n  | { state: 'empty' }\n  | { state: 'set'; masked: string }\n  | { state: 'locked'; masked: string }\n  | { state: 'error'; masked: string; message: string }\n\nexport type ByokPrompt = {\n  provider: ProviderId\n  reason: 'missing' | 'locked'\n}\n\nexport type ByokSnapshot = {\n  status: Partial<Record<string, KeyStatus>>\n  locked: boolean\n  prompt: ByokPrompt | null\n  storageError: string | null\n}\n\nexport interface DefineByokOptions {\n  storage?: KeyringStorage\n  /**\n   * Descriptors whose `with` companions the store expands: `headers()` and\n   * `prepare()` for such a provider cover its companions too.\n   */\n  providers?: ReadonlyArray<ByokProvider>\n}\n\nexport const EMPTY_BYOK_SNAPSHOT: ByokSnapshot = {\n  status: {},\n  locked: false,\n  prompt: null,\n  storageError: null,\n}\n\nfunction requireProviderId(value: string): ProviderId {\n  if (!isProviderId(value)) {\n    throw new Error(`Invalid BYOK provider id: ${value}`)\n  }\n  return value\n}\n\nfunction errorMessage(error: unknown, fallback: string): string {\n  return error instanceof Error && error.message.length > 0\n    ? error.message\n    : fallback\n}\n\nfunction isByokCeremonyCancel(error: unknown): boolean {\n  if (\n    typeof DOMException !== 'undefined' &&\n    error instanceof DOMException &&\n    error.name === 'NotAllowedError'\n  ) {\n    return true\n  }\n  if (error instanceof Error) {\n    if (error.name === 'NotAllowedError') return true\n    const message = error.message.toLowerCase()\n    return message.includes('cancelled') || message.includes('not allowed')\n  }\n  return false\n}\n\nfunction sanitizeKeyring(value: unknown): Keyring {\n  if (typeof value !== 'object' || value === null) return {}\n  const keys: Keyring = {}\n  for (const [provider, key] of Object.entries(value)) {\n    if (isProviderId(provider) && typeof key === 'string' && key.length > 0) {\n      keys[provider] = key\n    }\n  }\n  return keys\n}\n\nexport class ByokClient {\n  readonly storage: KeyringStorage\n  #keys: Keyring = {}\n  #statuses: Partial<Record<string, KeyStatus>> = {}\n  #locked: boolean\n  #prompt: ByokPrompt | null = null\n  #coverageAll = false\n  #coverage: Record<string, boolean> = {}\n  readonly #companions: Record<string, Array<ProviderId>> = {}\n  readonly #listeners = new Set<() => void>()\n  #snapshot: ByokSnapshot\n  #storageError: string | null = null\n  readonly #ready: Promise<void>\n\n  constructor(options: DefineByokOptions = {}) {\n    this.storage = options.storage ?? memoryStorage()\n    for (const provider of options.providers ?? []) {\n      if (provider.with?.length) {\n        this.#companions[requireProviderId(provider.id)] = provider.with.map(\n          (companion) => requireProviderId(companion.id),\n        )\n      }\n    }\n    this.#locked = Boolean(this.storage.unlockable)\n    this.#snapshot = this.#buildSnapshot()\n    this.#ready = this.#hydrate()\n  }\n\n  /** Resolves when constructor hydration (peek/load) finishes. */\n  ready = (): Promise<void> => this.#ready\n\n  subscribe = (listener: () => void): (() => void) => {\n    this.#listeners.add(listener)\n    return () => {\n      this.#listeners.delete(listener)\n    }\n  }\n\n  getSnapshot = (): ByokSnapshot => this.#snapshot\n\n  #buildSnapshot(): ByokSnapshot {\n    return {\n      status: { ...this.#statuses },\n      locked: this.#locked,\n      prompt: this.#prompt,\n      storageError: this.#storageError,\n    }\n  }\n\n  keys(): Keyring {\n    return { ...this.#keys }\n  }\n\n  request(provider: ProviderId, reason: ByokPrompt['reason']): void {\n    this.#prompt = { provider: requireProviderId(provider), reason }\n    this.#emit()\n  }\n\n  /**\n   * `true` — the server can fill any slug from env.\n   * `false` — no env coverage.\n   * A record merges per-id flags and clears the all/none boolean.\n   */\n  setServerCoverage(flags: boolean | Readonly<Record<string, boolean>>): void {\n    if (typeof flags === 'boolean') {\n      this.#coverageAll = flags\n      this.#coverage = {}\n      return\n    }\n    this.#coverageAll = false\n    this.#coverage = { ...this.#coverage, ...flags }\n  }\n\n  #hasCoverage(provider: string): boolean {\n    return this.#coverageAll || this.#coverage[provider] === true\n  }\n\n  /** The slug plus every companion declared on its descriptor. */\n  #expand(provider: ProviderId): Array<ProviderId> {\n    return [provider, ...(this.#companions[provider] ?? [])]\n  }\n\n  headers(provider?: ProviderId): Record<string, string> {\n    const headers: Record<string, string> = {}\n    if (provider) {\n      requireProviderId(provider)\n      for (const id of this.#expand(provider)) {\n        const key = this.#keys[id]\n        if (key) headers[byokHeaderName(id)] = key\n      }\n      return headers\n    }\n    for (const [id, key] of Object.entries(this.#keys)) {\n      if (key) headers[byokHeaderName(id)] = key\n    }\n    return headers\n  }\n\n  async prepare(provider?: ProviderId): Promise<void> {\n    await this.#ready\n    if (this.storage.unlockable && this.#locked) {\n      await this.unlock()\n    }\n    if (!provider) return\n    requireProviderId(provider)\n    for (const id of this.#expand(provider)) {\n      if (this.#keys[id] || this.#hasCoverage(id)) continue\n      this.request(id, 'missing')\n      throw new ByokBlockedError(id, 'missing')\n    }\n  }\n\n  async update(\n    providerOrKey: ProviderId | string,\n    key?: string,\n  ): Promise<void> {\n    await this.#ready\n    let provider: ProviderId\n    let nextKey: string\n    if (key === undefined) {\n      if (!this.#prompt) {\n        throw new Error('byok.update(key) cannot run when prompt is null')\n      }\n      provider = this.#prompt.provider\n      nextKey = providerOrKey\n    } else {\n      provider = requireProviderId(providerOrKey)\n      nextKey = key\n    }\n    nextKey = nextKey.trim()\n    if (nextKey.length === 0) {\n      throw new Error('BYOK key must be non-empty')\n    }\n    if (this.storage.unlockable && this.#locked) {\n      await this.unlock()\n    }\n    const previousKeys = this.#keys\n    const previousStatuses = { ...this.#statuses }\n    const previousLocked = this.#locked\n    const previousPrompt = this.#prompt\n    const previousStorageError = this.#storageError\n    const next = { ...this.#keys, [provider]: nextKey }\n    try {\n      await this.storage.save(next)\n    } catch (error) {\n      this.#keys = previousKeys\n      this.#statuses = previousStatuses\n      this.#locked = previousLocked\n      this.#prompt = previousPrompt\n      this.#storageError = previousStorageError\n      this.#statuses[provider] = {\n        state: 'error',\n        masked: maskKey(nextKey),\n        message: errorMessage(error, `Failed to persist ${provider} key`),\n      }\n      this.#emit()\n      throw error\n    }\n    this.#keys = next\n    this.#statuses[provider] = { state: 'set', masked: maskKey(nextKey) }\n    this.#locked = false\n    this.#prompt = null\n    this.#storageError = null\n    this.#emit()\n  }\n\n  async clear(provider?: ProviderId): Promise<void> {\n    await this.#ready\n    if (provider) {\n      requireProviderId(provider)\n      if (this.storage.unlockable && this.#locked) {\n        await this.unlock()\n      }\n      const previousKeys = this.#keys\n      const previousStatuses = { ...this.#statuses }\n      const next = { ...this.#keys }\n      delete next[provider]\n      try {\n        await this.storage.save(next)\n      } catch (error) {\n        this.#keys = previousKeys\n        this.#statuses = previousStatuses\n        this.#emit()\n        throw error\n      }\n      this.#keys = next\n      delete this.#statuses[provider]\n      this.#emit()\n      return\n    }\n    const previousKeys = this.#keys\n    const previousStatuses = this.#statuses\n    const previousLocked = this.#locked\n    const previousPrompt = this.#prompt\n    try {\n      await this.storage.clear()\n    } catch (error) {\n      this.#keys = previousKeys\n      this.#statuses = previousStatuses\n      this.#locked = previousLocked\n      this.#prompt = previousPrompt\n      this.#emit()\n      throw error\n    }\n    this.#keys = {}\n    this.#statuses = {}\n    this.#locked = false\n    this.#prompt = null\n    this.#storageError = null\n    this.#emit()\n  }\n\n  async unlock(): Promise<void> {\n    await this.#ready\n    if (!this.storage.unlockable) return\n    try {\n      const loaded = sanitizeKeyring(await this.storage.load())\n      this.#keys = { ...loaded, ...this.#keys }\n      for (const [id, value] of Object.entries(loaded)) {\n        if (!isProviderId(id) || !value) continue\n        const existing = this.#statuses[id]\n        if (!existing || existing.state === 'locked') {\n          this.#statuses[id] = { state: 'set', masked: maskKey(value) }\n        }\n      }\n      this.#locked = false\n      this.#storageError = null\n      this.#emit()\n    } catch (error) {\n      if (isByokCeremonyCancel(error)) {\n        const provider = this.#lockedProvider()\n        if (provider) {\n          this.request(provider, 'locked')\n          throw new ByokBlockedError(provider, 'locked')\n        }\n      }\n      this.#storageError = errorMessage(error, 'Failed to unlock keyring')\n      this.#emit()\n      throw error instanceof Error ? error : new Error(String(error))\n    }\n  }\n\n  #lockedProvider(): ProviderId | undefined {\n    if (this.#prompt && isProviderId(this.#prompt.provider)) {\n      return this.#prompt.provider\n    }\n    for (const [id, status] of Object.entries(this.#statuses)) {\n      if (status?.state === 'locked' && isProviderId(id)) return id\n    }\n    return undefined\n  }\n\n  async #hydrate(): Promise<void> {\n    if (this.storage.unlockable) {\n      if (!this.storage.peek) return\n      try {\n        const preview = await this.storage.peek()\n        for (const [id, last4] of Object.entries(preview)) {\n          if (!isProviderId(id) || this.#statuses[id]) continue\n          this.#statuses[id] = {\n            state: 'locked',\n            masked: last4 ? last4 : '••',\n          }\n        }\n        this.#locked = Object.keys(preview).length > 0\n        this.#storageError = null\n        this.#emit()\n      } catch (error) {\n        this.#storageError = errorMessage(error, 'Failed to read keyring')\n        this.#emit()\n      }\n      return\n    }\n    try {\n      const loaded = sanitizeKeyring(await this.storage.load())\n      this.#keys = { ...loaded, ...this.#keys }\n      for (const [id, value] of Object.entries(loaded)) {\n        if (!isProviderId(id) || !value) continue\n        this.#statuses[id] = { state: 'set', masked: maskKey(value) }\n      }\n      this.#storageError = null\n      this.#emit()\n    } catch (error) {\n      this.#storageError = errorMessage(error, 'Failed to read keyring')\n      this.#emit()\n    }\n  }\n\n  #emit(): void {\n    this.#snapshot = this.#buildSnapshot()\n    for (const listener of this.#listeners) listener()\n  }\n}\n\nexport function defineByok(options: DefineByokOptions = {}): ByokClient {\n  return new ByokClient(options)\n}\n"],"mappings":";;;AAqCA,IAAa,sBAAoC;CAC/C,QAAQ,CAAC;CACT,QAAQ;CACR,QAAQ;CACR,cAAc;AAChB;AAEA,SAAS,kBAAkB,OAA2B;CACpD,IAAI,CAAC,aAAa,KAAK,GACrB,MAAM,IAAI,MAAM,6BAA6B,OAAO;CAEtD,OAAO;AACT;AAEA,SAAS,aAAa,OAAgB,UAA0B;CAC9D,OAAO,iBAAiB,SAAS,MAAM,QAAQ,SAAS,IACpD,MAAM,UACN;AACN;AAEA,SAAS,qBAAqB,OAAyB;CACrD,IACE,OAAO,iBAAiB,eACxB,iBAAiB,gBACjB,MAAM,SAAS,mBAEf,OAAO;CAET,IAAI,iBAAiB,OAAO;EAC1B,IAAI,MAAM,SAAS,mBAAmB,OAAO;EAC7C,MAAM,UAAU,MAAM,QAAQ,YAAY;EAC1C,OAAO,QAAQ,SAAS,WAAW,KAAK,QAAQ,SAAS,aAAa;CACxE;CACA,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAyB;CAChD,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,CAAC;CACzD,MAAM,OAAgB,CAAC;CACvB,KAAK,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,KAAK,GAChD,IAAI,aAAa,QAAQ,KAAK,OAAO,QAAQ,YAAY,IAAI,SAAS,GACpE,KAAK,YAAY;CAGrB,OAAO;AACT;AAEA,IAAa,aAAb,MAAwB;CACtB;CACA,QAAiB,CAAC;CAClB,YAAgD,CAAC;CACjD;CACA,UAA6B;CAC7B,eAAe;CACf,YAAqC,CAAC;CACtC,cAA0D,CAAC;CAC3D,6BAAsB,IAAI,IAAgB;CAC1C;CACA,gBAA+B;CAC/B;CAEA,YAAY,UAA6B,CAAC,GAAG;EAC3C,KAAK,UAAU,QAAQ,WAAW,cAAc;EAChD,KAAK,MAAM,YAAY,QAAQ,aAAa,CAAC,GAC3C,IAAI,SAAS,MAAM,QACjB,KAAKA,YAAY,kBAAkB,SAAS,EAAE,KAAK,SAAS,KAAK,KAC9D,cAAc,kBAAkB,UAAU,EAAE,CAC/C;EAGJ,KAAKG,UAAU,QAAQ,KAAK,QAAQ,UAAU;EAC9C,KAAKC,YAAY,KAAKC,eAAe;EACrC,KAAKH,SAAS,KAAKI,SAAS;CAC9B;;CAGA,cAA6B,KAAKJ;CAElC,aAAa,aAAuC;EAClD,KAAKD,WAAW,IAAI,QAAQ;EAC5B,aAAa;GACX,KAAKA,WAAW,OAAO,QAAQ;EACjC;CACF;CAEA,oBAAkC,KAAKG;CAEvC,iBAA+B;EAC7B,OAAO;GACL,QAAQ,EAAE,GAAG,KAAKG,UAAU;GAC5B,QAAQ,KAAKJ;GACb,QAAQ,KAAKK;GACb,cAAc,KAAKC;EACrB;CACF;CAEA,OAAgB;EACd,OAAO,EAAE,GAAG,KAAKC,MAAM;CACzB;CAEA,QAAQ,UAAsB,QAAoC;EAChE,KAAKF,UAAU;GAAE,UAAU,kBAAkB,QAAQ;GAAG;EAAO;EAC/D,KAAKG,MAAM;CACb;;;;;;CAOA,kBAAkB,OAA0D;EAC1E,IAAI,OAAO,UAAU,WAAW;GAC9B,KAAKC,eAAe;GACpB,KAAKC,YAAY,CAAC;GAClB;EACF;EACA,KAAKD,eAAe;EACpB,KAAKC,YAAY;GAAE,GAAG,KAAKA;GAAW,GAAG;EAAM;CACjD;CAEA,aAAa,UAA2B;EACtC,OAAO,KAAKD,gBAAgB,KAAKC,UAAU,cAAc;CAC3D;;CAGA,QAAQ,UAAyC;EAC/C,OAAO,CAAC,UAAU,GAAI,KAAKb,YAAY,aAAa,CAAC,CAAE;CACzD;CAEA,QAAQ,UAA+C;EACrD,MAAM,UAAkC,CAAC;EACzC,IAAI,UAAU;GACZ,kBAAkB,QAAQ;GAC1B,KAAK,MAAM,MAAM,KAAKc,QAAQ,QAAQ,GAAG;IACvC,MAAM,MAAM,KAAKJ,MAAM;IACvB,IAAI,KAAK,QAAQ,eAAe,EAAE,KAAK;GACzC;GACA,OAAO;EACT;EACA,KAAK,MAAM,CAAC,IAAI,QAAQ,OAAO,QAAQ,KAAKA,KAAK,GAC/C,IAAI,KAAK,QAAQ,eAAe,EAAE,KAAK;EAEzC,OAAO;CACT;CAEA,MAAM,QAAQ,UAAsC;EAClD,MAAM,KAAKR;EACX,IAAI,KAAK,QAAQ,cAAc,KAAKC,SAClC,MAAM,KAAK,OAAO;EAEpB,IAAI,CAAC,UAAU;EACf,kBAAkB,QAAQ;EAC1B,KAAK,MAAM,MAAM,KAAKW,QAAQ,QAAQ,GAAG;GACvC,IAAI,KAAKJ,MAAM,OAAO,KAAKK,aAAa,EAAE,GAAG;GAC7C,KAAK,QAAQ,IAAI,SAAS;GAC1B,MAAM,IAAI,iBAAiB,IAAI,SAAS;EAC1C;CACF;CAEA,MAAM,OACJ,eACA,KACe;EACf,MAAM,KAAKb;EACX,IAAI;EACJ,IAAI;EACJ,IAAI,QAAQ,KAAA,GAAW;GACrB,IAAI,CAAC,KAAKM,SACR,MAAM,IAAI,MAAM,iDAAiD;GAEnE,WAAW,KAAKA,QAAQ;GACxB,UAAU;EACZ,OAAO;GACL,WAAW,kBAAkB,aAAa;GAC1C,UAAU;EACZ;EACA,UAAU,QAAQ,KAAK;EACvB,IAAI,QAAQ,WAAW,GACrB,MAAM,IAAI,MAAM,4BAA4B;EAE9C,IAAI,KAAK,QAAQ,cAAc,KAAKL,SAClC,MAAM,KAAK,OAAO;EAEpB,MAAM,eAAe,KAAKO;EAC1B,MAAM,mBAAmB,EAAE,GAAG,KAAKH,UAAU;EAC7C,MAAM,iBAAiB,KAAKJ;EAC5B,MAAM,iBAAiB,KAAKK;EAC5B,MAAM,uBAAuB,KAAKC;EAClC,MAAM,OAAO;GAAE,GAAG,KAAKC;IAAQ,WAAW;EAAQ;EAClD,IAAI;GACF,MAAM,KAAK,QAAQ,KAAK,IAAI;EAC9B,SAAS,OAAO;GACd,KAAKA,QAAQ;GACb,KAAKH,YAAY;GACjB,KAAKJ,UAAU;GACf,KAAKK,UAAU;GACf,KAAKC,gBAAgB;GACrB,KAAKF,UAAU,YAAY;IACzB,OAAO;IACP,QAAQ,QAAQ,OAAO;IACvB,SAAS,aAAa,OAAO,qBAAqB,SAAS,KAAK;GAClE;GACA,KAAKI,MAAM;GACX,MAAM;EACR;EACA,KAAKD,QAAQ;EACb,KAAKH,UAAU,YAAY;GAAE,OAAO;GAAO,QAAQ,QAAQ,OAAO;EAAE;EACpE,KAAKJ,UAAU;EACf,KAAKK,UAAU;EACf,KAAKC,gBAAgB;EACrB,KAAKE,MAAM;CACb;CAEA,MAAM,MAAM,UAAsC;EAChD,MAAM,KAAKT;EACX,IAAI,UAAU;GACZ,kBAAkB,QAAQ;GAC1B,IAAI,KAAK,QAAQ,cAAc,KAAKC,SAClC,MAAM,KAAK,OAAO;GAEpB,MAAM,eAAe,KAAKO;GAC1B,MAAM,mBAAmB,EAAE,GAAG,KAAKH,UAAU;GAC7C,MAAM,OAAO,EAAE,GAAG,KAAKG,MAAM;GAC7B,OAAO,KAAK;GACZ,IAAI;IACF,MAAM,KAAK,QAAQ,KAAK,IAAI;GAC9B,SAAS,OAAO;IACd,KAAKA,QAAQ;IACb,KAAKH,YAAY;IACjB,KAAKI,MAAM;IACX,MAAM;GACR;GACA,KAAKD,QAAQ;GACb,OAAO,KAAKH,UAAU;GACtB,KAAKI,MAAM;GACX;EACF;EACA,MAAM,eAAe,KAAKD;EAC1B,MAAM,mBAAmB,KAAKH;EAC9B,MAAM,iBAAiB,KAAKJ;EAC5B,MAAM,iBAAiB,KAAKK;EAC5B,IAAI;GACF,MAAM,KAAK,QAAQ,MAAM;EAC3B,SAAS,OAAO;GACd,KAAKE,QAAQ;GACb,KAAKH,YAAY;GACjB,KAAKJ,UAAU;GACf,KAAKK,UAAU;GACf,KAAKG,MAAM;GACX,MAAM;EACR;EACA,KAAKD,QAAQ,CAAC;EACd,KAAKH,YAAY,CAAC;EAClB,KAAKJ,UAAU;EACf,KAAKK,UAAU;EACf,KAAKC,gBAAgB;EACrB,KAAKE,MAAM;CACb;CAEA,MAAM,SAAwB;EAC5B,MAAM,KAAKT;EACX,IAAI,CAAC,KAAK,QAAQ,YAAY;EAC9B,IAAI;GACF,MAAM,SAAS,gBAAgB,MAAM,KAAK,QAAQ,KAAK,CAAC;GACxD,KAAKQ,QAAQ;IAAE,GAAG;IAAQ,GAAG,KAAKA;GAAM;GACxC,KAAK,MAAM,CAAC,IAAI,UAAU,OAAO,QAAQ,MAAM,GAAG;IAChD,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO;IACjC,MAAM,WAAW,KAAKH,UAAU;IAChC,IAAI,CAAC,YAAY,SAAS,UAAU,UAClC,KAAKA,UAAU,MAAM;KAAE,OAAO;KAAO,QAAQ,QAAQ,KAAK;IAAE;GAEhE;GACA,KAAKJ,UAAU;GACf,KAAKM,gBAAgB;GACrB,KAAKE,MAAM;EACb,SAAS,OAAO;GACd,IAAI,qBAAqB,KAAK,GAAG;IAC/B,MAAM,WAAW,KAAKK,gBAAgB;IACtC,IAAI,UAAU;KACZ,KAAK,QAAQ,UAAU,QAAQ;KAC/B,MAAM,IAAI,iBAAiB,UAAU,QAAQ;IAC/C;GACF;GACA,KAAKP,gBAAgB,aAAa,OAAO,0BAA0B;GACnE,KAAKE,MAAM;GACX,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;EAChE;CACF;CAEA,kBAA0C;EACxC,IAAI,KAAKH,WAAW,aAAa,KAAKA,QAAQ,QAAQ,GACpD,OAAO,KAAKA,QAAQ;EAEtB,KAAK,MAAM,CAAC,IAAI,WAAW,OAAO,QAAQ,KAAKD,SAAS,GACtD,IAAI,QAAQ,UAAU,YAAY,aAAa,EAAE,GAAG,OAAO;CAG/D;CAEA,MAAMD,WAA0B;EAC9B,IAAI,KAAK,QAAQ,YAAY;GAC3B,IAAI,CAAC,KAAK,QAAQ,MAAM;GACxB,IAAI;IACF,MAAM,UAAU,MAAM,KAAK,QAAQ,KAAK;IACxC,KAAK,MAAM,CAAC,IAAI,UAAU,OAAO,QAAQ,OAAO,GAAG;KACjD,IAAI,CAAC,aAAa,EAAE,KAAK,KAAKC,UAAU,KAAK;KAC7C,KAAKA,UAAU,MAAM;MACnB,OAAO;MACP,QAAQ,QAAQ,QAAQ;KAC1B;IACF;IACA,KAAKJ,UAAU,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS;IAC7C,KAAKM,gBAAgB;IACrB,KAAKE,MAAM;GACb,SAAS,OAAO;IACd,KAAKF,gBAAgB,aAAa,OAAO,wBAAwB;IACjE,KAAKE,MAAM;GACb;GACA;EACF;EACA,IAAI;GACF,MAAM,SAAS,gBAAgB,MAAM,KAAK,QAAQ,KAAK,CAAC;GACxD,KAAKD,QAAQ;IAAE,GAAG;IAAQ,GAAG,KAAKA;GAAM;GACxC,KAAK,MAAM,CAAC,IAAI,UAAU,OAAO,QAAQ,MAAM,GAAG;IAChD,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO;IACjC,KAAKH,UAAU,MAAM;KAAE,OAAO;KAAO,QAAQ,QAAQ,KAAK;IAAE;GAC9D;GACA,KAAKE,gBAAgB;GACrB,KAAKE,MAAM;EACb,SAAS,OAAO;GACd,KAAKF,gBAAgB,aAAa,OAAO,wBAAwB;GACjE,KAAKE,MAAM;EACb;CACF;CAEA,QAAc;EACZ,KAAKP,YAAY,KAAKC,eAAe;EACrC,KAAK,MAAM,YAAY,KAAKJ,YAAY,SAAS;CACnD;AACF;AAEA,SAAgB,WAAW,UAA6B,CAAC,GAAe;CACtE,OAAO,IAAI,WAAW,OAAO;AAC/B"}

package/dist/esm/byok/passkey.js

@@ -43,6 +43,10 @@ function isPasskeyStorageSupported() {
 }
 /** Derive a non-extractable AES-256-GCM key from a 32-byte PRF output. */
 async function deriveAesKey(prfOutput) {
+	if (Array.isArray(prfOutput)) {
+		if (prfOutput.length !== 32 || !Array.from(prfOutput).every((byte) => typeof byte === "number" && Number.isInteger(byte) && byte >= 0 && byte <= 255)) throw new Error("Invalid passkey PRF byte array");
+		prfOutput = new Uint8Array(prfOutput);
+	}
 	const base = await crypto.subtle.importKey("raw", prfOutput, "HKDF", false, ["deriveKey"]);
 	return crypto.subtle.deriveKey({
 		name: "HKDF",
@@ -111,6 +115,17 @@ function requirePublicKeyCredential(credential, action) {
 	if (!(credential instanceof PublicKeyCredential)) throw new Error(`Unexpected credential type during ${action}`);
 	return credential;
 }
+/**
+* Some browsers (Dia, Safari) silently suppress `navigator.credentials.get()`
+* — no prompt, never resolves — when it runs without transient user activation.
+* The activation from a click expires (~5s) and is lost across enough async
+* work, so an unlock buried deep in a send pipeline just hangs. Fail fast with
+* a clear, catchable error so the app can re-run it from a fresh gesture.
+*/
+function requireUserActivation(action) {
+	const activation = globalThis.navigator?.userActivation;
+	if (activation && activation.isActive === false) throw new Error(`Passkey ${action} needs a fresh user action (e.g. a click). Run it directly from the event handler, before awaiting other work.`);
+}
 async function registerPasskey(rpName, userName, rpId) {
 	const salt = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(32));
 	const credential = requirePublicKeyCredential(await navigator.credentials.create({ publicKey: {
@@ -178,6 +193,7 @@ function passkeyStorage(options = {}) {
 		};
 		const existing = await idbGet(dbName);
 		if (existing) {
+			requireUserActivation("unlock");
 			cachedKey = await deriveAesKey(await evaluatePrf(existing.credentialId, existing.salt));
 			cachedMeta = {
 				credentialId: existing.credentialId,

package/dist/esm/byok/passkey.js.map

@@ -1 +1 @@
-{"version":3,"file":"passkey.js","names":[],"sources":["../../../src/byok/passkey.ts"],"sourcesContent":["import { isProviderId } from '@tanstack/ai/byok'\nimport { memoryStorage } from './storage'\nimport type { KeyPreview, Keyring, KeyringStorage } from './storage'\n\n/**\n * Passkey-encrypted keyring storage (WebAuthn PRF → HKDF → AES-256-GCM).\n *\n * The keyring is encrypted at rest in IndexedDB with an AES-256-GCM key derived\n * from a passkey's PRF output, unwrapped on demand with a biometric/PIN tap.\n * Decryption happens entirely client-side with the user present — no server,\n * no custodian.\n *\n * Honest scope: this protects against at-rest theft (stolen device,\n * storage-dumping extension, backups). It does NOT defeat live in-page XSS —\n * an attacker running JS in the origin after the user unlocks can read the\n * decrypted keys from memory.\n */\n\nconst STORE_NAME = 'keyring'\nconst RECORD_ID = 'default'\nconst HKDF_INFO = 'byok:keyring:v1'\nconst DEFAULT_DB = 'byok'\n\ninterface StoredRecord {\n  id: string\n  /** The passkey's raw credential id, replayed in the unlock ceremony. */\n  credentialId: ArrayBuffer\n  /** Fixed per-install PRF evaluation input (not secret). */\n  salt: ArrayBuffer\n  /** AES-GCM initialization vector for this ciphertext. */\n  iv: ArrayBuffer\n  /** Encrypted keyring JSON. */\n  ciphertext: ArrayBuffer\n  /**\n   * Unencrypted presence metadata (`provider → last 4`). Non-sensitive, so it\n   * can be read via {@link KeyringStorage.peek} without an unlock ceremony to\n   * show saved keys as \"locked\" after a refresh.\n   */\n  preview: KeyPreview\n}\n\nfunction sanitizeKeyring(value: unknown): Keyring {\n  if (typeof value !== 'object' || value === null) return {}\n  const keys: Keyring = {}\n  for (const [provider, key] of Object.entries(value)) {\n    if (isProviderId(provider) && typeof key === 'string' && key.length > 0) {\n      keys[provider] = key\n    }\n  }\n  return keys\n}\n\n/** Build the non-sensitive `provider → last 4` preview from a keyring. */\nfunction previewOf(keys: Keyring): KeyPreview {\n  const preview: KeyPreview = {}\n  for (const [provider, key] of Object.entries(keys)) {\n    if (!key || !isProviderId(provider)) continue\n    // Keys of length ≤ 4 would make last-4 the whole secret — store presence only.\n    preview[provider] = key.length > 4 ? key.slice(-4) : ''\n  }\n  return preview\n}\n\n/**\n * Whether the current environment exposes WebAuthn. Actual PRF support can\n * only be confirmed during registration; `passkeyStorage` throws if the\n * chosen authenticator does not support PRF.\n */\nexport function isPasskeyStorageSupported(): boolean {\n  return (\n    typeof globalThis !== 'undefined' &&\n    typeof globalThis.PublicKeyCredential !== 'undefined' &&\n    typeof globalThis.navigator !== 'undefined' &&\n    typeof globalThis.navigator.credentials.create === 'function'\n  )\n}\n\n// ---------------------------------------------------------------------------\n// Crypto (exported for testing; the WebAuthn ceremony below feeds `deriveAesKey`)\n// ---------------------------------------------------------------------------\n\n/** Derive a non-extractable AES-256-GCM key from a 32-byte PRF output. */\nexport async function deriveAesKey(\n  prfOutput: BufferSource,\n): Promise<CryptoKey> {\n  const base = await crypto.subtle.importKey('raw', prfOutput, 'HKDF', false, [\n    'deriveKey',\n  ])\n  return crypto.subtle.deriveKey(\n    {\n      name: 'HKDF',\n      hash: 'SHA-256',\n      salt: new Uint8Array(0),\n      info: new TextEncoder().encode(HKDF_INFO),\n    },\n    base,\n    { name: 'AES-GCM', length: 256 },\n    false,\n    ['encrypt', 'decrypt'],\n  )\n}\n\nexport async function encryptKeyring(\n  key: CryptoKey,\n  keys: Keyring,\n): Promise<{ iv: ArrayBuffer; ciphertext: ArrayBuffer }> {\n  const iv = crypto.getRandomValues(new Uint8Array(12))\n  const plaintext = new TextEncoder().encode(JSON.stringify(keys))\n  const ciphertext = await crypto.subtle.encrypt(\n    { name: 'AES-GCM', iv },\n    key,\n    plaintext,\n  )\n  return { iv: iv.buffer, ciphertext }\n}\n\nexport async function decryptKeyring(\n  key: CryptoKey,\n  iv: BufferSource,\n  ciphertext: BufferSource,\n): Promise<Keyring> {\n  const plaintext = await crypto.subtle.decrypt(\n    { name: 'AES-GCM', iv },\n    key,\n    ciphertext,\n  )\n  const parsed: unknown = JSON.parse(new TextDecoder().decode(plaintext))\n  return sanitizeKeyring(parsed)\n}\n\n// ---------------------------------------------------------------------------\n// IndexedDB\n// ---------------------------------------------------------------------------\n\nfunction openDb(dbName: string): Promise<IDBDatabase> {\n  return new Promise((resolve, reject) => {\n    const request = indexedDB.open(dbName, 1)\n    request.onupgradeneeded = () => {\n      request.result.createObjectStore(STORE_NAME, { keyPath: 'id' })\n    }\n    request.onsuccess = () => resolve(request.result)\n    request.onerror = () => reject(request.error)\n  })\n}\n\nfunction idbGet(dbName: string): Promise<StoredRecord | null> {\n  return openDb(dbName).then(\n    (db) =>\n      new Promise((resolve, reject) => {\n        const request = db\n          .transaction(STORE_NAME, 'readonly')\n          .objectStore(STORE_NAME)\n          .get(RECORD_ID)\n        request.onsuccess = () => resolve(request.result ?? null)\n        request.onerror = () => reject(request.error)\n      }),\n  )\n}\n\nfunction idbPut(dbName: string, record: StoredRecord): Promise<void> {\n  return openDb(dbName).then(\n    (db) =>\n      new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE_NAME, 'readwrite')\n        tx.objectStore(STORE_NAME).put(record)\n        tx.oncomplete = () => resolve()\n        tx.onerror = () => reject(tx.error)\n      }),\n  )\n}\n\nfunction idbClear(dbName: string): Promise<void> {\n  return openDb(dbName).then(\n    (db) =>\n      new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE_NAME, 'readwrite')\n        tx.objectStore(STORE_NAME).delete(RECORD_ID)\n        tx.oncomplete = () => resolve()\n        tx.onerror = () => reject(tx.error)\n      }),\n  )\n}\n\n// ---------------------------------------------------------------------------\n// WebAuthn ceremonies\n// ---------------------------------------------------------------------------\n\nfunction requirePublicKeyCredential(\n  credential: Credential | null,\n  action: string,\n): PublicKeyCredential {\n  if (!credential) throw new Error(`Passkey ${action} was cancelled`)\n  if (!(credential instanceof PublicKeyCredential)) {\n    throw new Error(`Unexpected credential type during ${action}`)\n  }\n  return credential\n}\n\nasync function registerPasskey(\n  rpName: string,\n  userName: string,\n  rpId?: string,\n): Promise<{\n  credentialId: ArrayBuffer\n  salt: Uint8Array<ArrayBuffer>\n  prf?: BufferSource\n}> {\n  const salt = crypto.getRandomValues(new Uint8Array(32))\n  const credential = requirePublicKeyCredential(\n    await navigator.credentials.create({\n      publicKey: {\n        challenge: crypto.getRandomValues(new Uint8Array(32)),\n        // Omit `id` to let the browser bind the passkey to the current origin's\n        // effective domain; set it to scope across subdomains of a self-host.\n        rp: rpId ? { name: rpName, id: rpId } : { name: rpName },\n        user: {\n          id: crypto.getRandomValues(new Uint8Array(16)),\n          name: userName,\n          displayName: userName,\n        },\n        pubKeyCredParams: [\n          { type: 'public-key', alg: -7 },\n          { type: 'public-key', alg: -257 },\n        ],\n        authenticatorSelection: {\n          residentKey: 'required',\n          userVerification: 'required',\n        },\n        extensions: { prf: { eval: { first: salt } } },\n      },\n    }),\n    'registration',\n  )\n\n  const prf = credential.getClientExtensionResults().prf\n  if (!prf?.enabled) {\n    throw new Error(\n      'This authenticator does not support the WebAuthn PRF extension',\n    )\n  }\n  return { credentialId: credential.rawId, salt, prf: prf.results?.first }\n}\n\nasync function evaluatePrf(\n  credentialId: BufferSource,\n  salt: BufferSource,\n): Promise<BufferSource> {\n  const credential = requirePublicKeyCredential(\n    await navigator.credentials.get({\n      publicKey: {\n        challenge: crypto.getRandomValues(new Uint8Array(32)),\n        allowCredentials: [{ type: 'public-key', id: credentialId }],\n        userVerification: 'required',\n        extensions: { prf: { eval: { first: salt } } },\n      },\n    }),\n    'unlock',\n  )\n  const result = credential.getClientExtensionResults().prf?.results?.first\n  if (!result) {\n    throw new Error('Authenticator did not return a PRF result')\n  }\n  return result\n}\n\n// ---------------------------------------------------------------------------\n// Storage strategy\n// ---------------------------------------------------------------------------\n\nexport interface PasskeyStorageOptions {\n  /** Relying-party name shown in the passkey prompt. */\n  rpName?: string\n  /** Username label attached to the created passkey. */\n  userName?: string\n  /**\n   * WebAuthn Relying Party ID. Omit to bind the passkey to the current origin's\n   * effective domain (the default — no central/hardcoded domain). Set it to a\n   * registrable parent domain to share the credential across subdomains of your\n   * own deployment. The encrypted keyring is never portable across unrelated\n   * domains.\n   */\n  rpId?: string\n  /** IndexedDB database name. Defaults to `byok`. */\n  dbName?: string\n}\n\n/**\n * Passkey-encrypted persistence. `ByokClient` treats this as `unlockable`, so\n * nothing is decrypted until the user calls `unlock()` (or saves a key, which\n * registers a passkey on first use). The derived key is cached in memory for\n * the session so repeated saves don't re-prompt.\n */\nexport function passkeyStorage(\n  options: PasskeyStorageOptions = {},\n): KeyringStorage {\n  const rpName = options.rpName ?? 'BYOK'\n  const userName = options.userName ?? 'byok-keyring'\n  const { rpId } = options\n  const dbName = options.dbName ?? DEFAULT_DB\n\n  let cachedKey: CryptoKey | null = null\n  let cachedMeta: {\n    credentialId: ArrayBuffer\n    salt: Uint8Array<ArrayBuffer>\n  } | null = null\n\n  // Obtain the AES key, running exactly one WebAuthn ceremony if it isn't\n  // already cached for this session (unlock if a passkey exists, else register).\n  async function ensureKey(): Promise<{\n    key: CryptoKey\n    credentialId: ArrayBuffer\n    salt: Uint8Array<ArrayBuffer>\n  }> {\n    if (cachedKey && cachedMeta) {\n      return { key: cachedKey, ...cachedMeta }\n    }\n    const existing = await idbGet(dbName)\n    if (existing) {\n      const prf = await evaluatePrf(existing.credentialId, existing.salt)\n      cachedKey = await deriveAesKey(prf)\n      cachedMeta = {\n        credentialId: existing.credentialId,\n        salt: new Uint8Array(existing.salt),\n      }\n    } else {\n      const reg = await registerPasskey(rpName, userName, rpId)\n      const prf = reg.prf ?? (await evaluatePrf(reg.credentialId, reg.salt))\n      cachedKey = await deriveAesKey(prf)\n      cachedMeta = { credentialId: reg.credentialId, salt: reg.salt }\n    }\n    return { key: cachedKey, ...cachedMeta }\n  }\n\n  return {\n    id: 'passkey',\n    label: 'Passkey-encrypted (this device)',\n    persistent: true,\n    unlockable: true,\n    warning:\n      'Keys are encrypted with your passkey and unlocked with biometrics. ' +\n      'This protects saved keys if your device is stolen, but not against code ' +\n      'running on this page after you unlock.',\n    peek: async () => {\n      // Unencrypted last-4 sidecar — no key material, no unlock ceremony.\n      const existing = await idbGet(dbName)\n      return existing?.preview ?? {}\n    },\n    load: async () => {\n      const existing = await idbGet(dbName)\n      if (!existing) return {}\n      const { key } = await ensureKey()\n      return decryptKeyring(key, existing.iv, existing.ciphertext)\n    },\n    save: async (keys) => {\n      const existing = await idbGet(dbName)\n      const hasKeys = Object.values(keys).some(Boolean)\n      // First save with an empty keyring is a no-op — avoids a passkey ceremony\n      // when another storage tier writes an empty ring.\n      if (!hasKeys && !existing) return\n\n      const { key, credentialId, salt } = await ensureKey()\n      const { iv, ciphertext } = await encryptKeyring(key, keys)\n      await idbPut(dbName, {\n        id: RECORD_ID,\n        credentialId,\n        salt: salt.buffer,\n        iv,\n        ciphertext,\n        preview: previewOf(keys),\n      })\n    },\n    clear: async () => {\n      cachedKey = null\n      cachedMeta = null\n      await idbClear(dbName)\n    },\n  }\n}\n\n/**\n * Passkey-encrypted storage when WebAuthn is available in a secure context.\n * Otherwise session memory, with a warning — this is not an automatic PRF\n * fallback. First save still throws if the authenticator lacks PRF.\n */\nexport function defaultByokStorage(\n  options?: PasskeyStorageOptions,\n): KeyringStorage {\n  const secure =\n    typeof globalThis.isSecureContext !== 'boolean' ||\n    globalThis.isSecureContext\n  if (!isPasskeyStorageSupported() || !secure) {\n    return {\n      ...memoryStorage(),\n      warning:\n        'Passkeys are unavailable in this context. Keys stay in memory for this tab only.',\n    }\n  }\n  return passkeyStorage(options)\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkBA,IAAM,aAAa;AACnB,IAAM,YAAY;AAClB,IAAM,YAAY;AAClB,IAAM,aAAa;AAoBnB,SAAS,gBAAgB,OAAyB;CAChD,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,CAAC;CACzD,MAAM,OAAgB,CAAC;CACvB,KAAK,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,KAAK,GAChD,IAAI,aAAa,QAAQ,KAAK,OAAO,QAAQ,YAAY,IAAI,SAAS,GACpE,KAAK,YAAY;CAGrB,OAAO;AACT;;AAGA,SAAS,UAAU,MAA2B;CAC5C,MAAM,UAAsB,CAAC;CAC7B,KAAK,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,IAAI,GAAG;EAClD,IAAI,CAAC,OAAO,CAAC,aAAa,QAAQ,GAAG;EAErC,QAAQ,YAAY,IAAI,SAAS,IAAI,IAAI,MAAM,EAAE,IAAI;CACvD;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,4BAAqC;CACnD,OACE,OAAO,eAAe,eACtB,OAAO,WAAW,wBAAwB,eAC1C,OAAO,WAAW,cAAc,eAChC,OAAO,WAAW,UAAU,YAAY,WAAW;AAEvD;;AAOA,eAAsB,aACpB,WACoB;CACpB,MAAM,OAAO,MAAM,OAAO,OAAO,UAAU,OAAO,WAAW,QAAQ,OAAO,CAC1E,WACF,CAAC;CACD,OAAO,OAAO,OAAO,UACnB;EACE,MAAM;EACN,MAAM;EACN,sBAAM,IAAI,WAAW,CAAC;EACtB,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,SAAS;CAC1C,GACA,MACA;EAAE,MAAM;EAAW,QAAQ;CAAI,GAC/B,OACA,CAAC,WAAW,SAAS,CACvB;AACF;AAEA,eAAsB,eACpB,KACA,MACuD;CACvD,MAAM,KAAK,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;CACpD,MAAM,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC;CAC/D,MAAM,aAAa,MAAM,OAAO,OAAO,QACrC;EAAE,MAAM;EAAW;CAAG,GACtB,KACA,SACF;CACA,OAAO;EAAE,IAAI,GAAG;EAAQ;CAAW;AACrC;AAEA,eAAsB,eACpB,KACA,IACA,YACkB;CAClB,MAAM,YAAY,MAAM,OAAO,OAAO,QACpC;EAAE,MAAM;EAAW;CAAG,GACtB,KACA,UACF;CAEA,OAAO,gBADiB,KAAK,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,SAAS,CAC9C,CAAM;AAC/B;AAMA,SAAS,OAAO,QAAsC;CACpD,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,UAAU,UAAU,KAAK,QAAQ,CAAC;EACxC,QAAQ,wBAAwB;GAC9B,QAAQ,OAAO,kBAAkB,YAAY,EAAE,SAAS,KAAK,CAAC;EAChE;EACA,QAAQ,kBAAkB,QAAQ,QAAQ,MAAM;EAChD,QAAQ,gBAAgB,OAAO,QAAQ,KAAK;CAC9C,CAAC;AACH;AAEA,SAAS,OAAO,QAA8C;CAC5D,OAAO,OAAO,MAAM,CAAC,CAAC,MACnB,OACC,IAAI,SAAS,SAAS,WAAW;EAC/B,MAAM,UAAU,GACb,YAAY,YAAY,UAAU,CAAC,CACnC,YAAY,UAAU,CAAC,CACvB,IAAI,SAAS;EAChB,QAAQ,kBAAkB,QAAQ,QAAQ,UAAU,IAAI;EACxD,QAAQ,gBAAgB,OAAO,QAAQ,KAAK;CAC9C,CAAC,CACL;AACF;AAEA,SAAS,OAAO,QAAgB,QAAqC;CACnE,OAAO,OAAO,MAAM,CAAC,CAAC,MACnB,OACC,IAAI,SAAS,SAAS,WAAW;EAC/B,MAAM,KAAK,GAAG,YAAY,YAAY,WAAW;EACjD,GAAG,YAAY,UAAU,CAAC,CAAC,IAAI,MAAM;EACrC,GAAG,mBAAmB,QAAQ;EAC9B,GAAG,gBAAgB,OAAO,GAAG,KAAK;CACpC,CAAC,CACL;AACF;AAEA,SAAS,SAAS,QAA+B;CAC/C,OAAO,OAAO,MAAM,CAAC,CAAC,MACnB,OACC,IAAI,SAAS,SAAS,WAAW;EAC/B,MAAM,KAAK,GAAG,YAAY,YAAY,WAAW;EACjD,GAAG,YAAY,UAAU,CAAC,CAAC,OAAO,SAAS;EAC3C,GAAG,mBAAmB,QAAQ;EAC9B,GAAG,gBAAgB,OAAO,GAAG,KAAK;CACpC,CAAC,CACL;AACF;AAMA,SAAS,2BACP,YACA,QACqB;CACrB,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,WAAW,OAAO,eAAe;CAClE,IAAI,EAAE,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,qCAAqC,QAAQ;CAE/D,OAAO;AACT;AAEA,eAAe,gBACb,QACA,UACA,MAKC;CACD,MAAM,OAAO,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;CACtD,MAAM,aAAa,2BACjB,MAAM,UAAU,YAAY,OAAO,EACjC,WAAW;EACT,WAAW,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;EAGpD,IAAI,OAAO;GAAE,MAAM;GAAQ,IAAI;EAAK,IAAI,EAAE,MAAM,OAAO;EACvD,MAAM;GACJ,IAAI,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;GAC7C,MAAM;GACN,aAAa;EACf;EACA,kBAAkB,CAChB;GAAE,MAAM;GAAc,KAAK;EAAG,GAC9B;GAAE,MAAM;GAAc,KAAK;EAAK,CAClC;EACA,wBAAwB;GACtB,aAAa;GACb,kBAAkB;EACpB;EACA,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,KAAK,EAAE,EAAE;CAC/C,EACF,CAAC,GACD,cACF;CAEA,MAAM,MAAM,WAAW,0BAA0B,CAAC,CAAC;CACnD,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,MACR,gEACF;CAEF,OAAO;EAAE,cAAc,WAAW;EAAO;EAAM,KAAK,IAAI,SAAS;CAAM;AACzE;AAEA,eAAe,YACb,cACA,MACuB;CAYvB,MAAM,SAXa,2BACjB,MAAM,UAAU,YAAY,IAAI,EAC9B,WAAW;EACT,WAAW,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;EACpD,kBAAkB,CAAC;GAAE,MAAM;GAAc,IAAI;EAAa,CAAC;EAC3D,kBAAkB;EAClB,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,KAAK,EAAE,EAAE;CAC/C,EACF,CAAC,GACD,QAEa,CAAA,CAAW,0BAA0B,CAAC,CAAC,KAAK,SAAS;CACpE,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,2CAA2C;CAE7D,OAAO;AACT;;;;;;;AA6BA,SAAgB,eACd,UAAiC,CAAC,GAClB;CAChB,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,WAAW,QAAQ,YAAY;CACrC,MAAM,EAAE,SAAS;CACjB,MAAM,SAAS,QAAQ,UAAU;CAEjC,IAAI,YAA8B;CAClC,IAAI,aAGO;CAIX,eAAe,YAIZ;EACD,IAAI,aAAa,YACf,OAAO;GAAE,KAAK;GAAW,GAAG;EAAW;EAEzC,MAAM,WAAW,MAAM,OAAO,MAAM;EACpC,IAAI,UAAU;GAEZ,YAAY,MAAM,aAAa,MADb,YAAY,SAAS,cAAc,SAAS,IAAI,CAChC;GAClC,aAAa;IACX,cAAc,SAAS;IACvB,MAAM,IAAI,WAAW,SAAS,IAAI;GACpC;EACF,OAAO;GACL,MAAM,MAAM,MAAM,gBAAgB,QAAQ,UAAU,IAAI;GAExD,YAAY,MAAM,aADN,IAAI,OAAQ,MAAM,YAAY,IAAI,cAAc,IAAI,IAAI,CAClC;GAClC,aAAa;IAAE,cAAc,IAAI;IAAc,MAAM,IAAI;GAAK;EAChE;EACA,OAAO;GAAE,KAAK;GAAW,GAAG;EAAW;CACzC;CAEA,OAAO;EACL,IAAI;EACJ,OAAO;EACP,YAAY;EACZ,YAAY;EACZ,SACE;EAGF,MAAM,YAAY;GAGhB,QAAO,MADgB,OAAO,MAAM,EAAA,EACnB,WAAW,CAAC;EAC/B;EACA,MAAM,YAAY;GAChB,MAAM,WAAW,MAAM,OAAO,MAAM;GACpC,IAAI,CAAC,UAAU,OAAO,CAAC;GACvB,MAAM,EAAE,QAAQ,MAAM,UAAU;GAChC,OAAO,eAAe,KAAK,SAAS,IAAI,SAAS,UAAU;EAC7D;EACA,MAAM,OAAO,SAAS;GACpB,MAAM,WAAW,MAAM,OAAO,MAAM;GAIpC,IAAI,CAHY,OAAO,OAAO,IAAI,CAAC,CAAC,KAAK,OAGpC,KAAW,CAAC,UAAU;GAE3B,MAAM,EAAE,KAAK,cAAc,SAAS,MAAM,UAAU;GACpD,MAAM,EAAE,IAAI,eAAe,MAAM,eAAe,KAAK,IAAI;GACzD,MAAM,OAAO,QAAQ;IACnB,IAAI;IACJ;IACA,MAAM,KAAK;IACX;IACA;IACA,SAAS,UAAU,IAAI;GACzB,CAAC;EACH;EACA,OAAO,YAAY;GACjB,YAAY;GACZ,aAAa;GACb,MAAM,SAAS,MAAM;EACvB;CACF;AACF;;;;;;AAOA,SAAgB,mBACd,SACgB;CAChB,MAAM,SACJ,OAAO,WAAW,oBAAoB,aACtC,WAAW;CACb,IAAI,CAAC,0BAA0B,KAAK,CAAC,QACnC,OAAO;EACL,GAAG,cAAc;EACjB,SACE;CACJ;CAEF,OAAO,eAAe,OAAO;AAC/B"}
+{"version":3,"file":"passkey.js","names":[],"sources":["../../../src/byok/passkey.ts"],"sourcesContent":["import { isProviderId } from '@tanstack/ai/byok'\nimport { memoryStorage } from './storage'\nimport type { KeyPreview, Keyring, KeyringStorage } from './storage'\n\n/**\n * Passkey-encrypted keyring storage (WebAuthn PRF → HKDF → AES-256-GCM).\n *\n * The keyring is encrypted at rest in IndexedDB with an AES-256-GCM key derived\n * from a passkey's PRF output, unwrapped on demand with a biometric/PIN tap.\n * Decryption happens entirely client-side with the user present — no server,\n * no custodian.\n *\n * Honest scope: this protects against at-rest theft (stolen device,\n * storage-dumping extension, backups). It does NOT defeat live in-page XSS —\n * an attacker running JS in the origin after the user unlocks can read the\n * decrypted keys from memory.\n */\n\nconst STORE_NAME = 'keyring'\nconst RECORD_ID = 'default'\nconst HKDF_INFO = 'byok:keyring:v1'\nconst DEFAULT_DB = 'byok'\n\ninterface StoredRecord {\n  id: string\n  /** The passkey's raw credential id, replayed in the unlock ceremony. */\n  credentialId: ArrayBuffer\n  /** Fixed per-install PRF evaluation input (not secret). */\n  salt: ArrayBuffer\n  /** AES-GCM initialization vector for this ciphertext. */\n  iv: ArrayBuffer\n  /** Encrypted keyring JSON. */\n  ciphertext: ArrayBuffer\n  /**\n   * Unencrypted presence metadata (`provider → last 4`). Non-sensitive, so it\n   * can be read via {@link KeyringStorage.peek} without an unlock ceremony to\n   * show saved keys as \"locked\" after a refresh.\n   */\n  preview: KeyPreview\n}\n\nfunction sanitizeKeyring(value: unknown): Keyring {\n  if (typeof value !== 'object' || value === null) return {}\n  const keys: Keyring = {}\n  for (const [provider, key] of Object.entries(value)) {\n    if (isProviderId(provider) && typeof key === 'string' && key.length > 0) {\n      keys[provider] = key\n    }\n  }\n  return keys\n}\n\n/** Build the non-sensitive `provider → last 4` preview from a keyring. */\nfunction previewOf(keys: Keyring): KeyPreview {\n  const preview: KeyPreview = {}\n  for (const [provider, key] of Object.entries(keys)) {\n    if (!key || !isProviderId(provider)) continue\n    // Keys of length ≤ 4 would make last-4 the whole secret — store presence only.\n    preview[provider] = key.length > 4 ? key.slice(-4) : ''\n  }\n  return preview\n}\n\n/**\n * Whether the current environment exposes WebAuthn. Actual PRF support can\n * only be confirmed during registration; `passkeyStorage` throws if the\n * chosen authenticator does not support PRF.\n */\nexport function isPasskeyStorageSupported(): boolean {\n  return (\n    typeof globalThis !== 'undefined' &&\n    typeof globalThis.PublicKeyCredential !== 'undefined' &&\n    typeof globalThis.navigator !== 'undefined' &&\n    typeof globalThis.navigator.credentials.create === 'function'\n  )\n}\n\n// ---------------------------------------------------------------------------\n// Crypto (exported for testing; the WebAuthn ceremony below feeds `deriveAesKey`)\n// ---------------------------------------------------------------------------\n\n/** Derive a non-extractable AES-256-GCM key from a 32-byte PRF output. */\nexport async function deriveAesKey(\n  prfOutput: BufferSource,\n): Promise<CryptoKey> {\n  // Some passkey providers return a plain byte array instead of BufferSource.\n  if (Array.isArray(prfOutput)) {\n    if (\n      prfOutput.length !== 32 ||\n      !Array.from(prfOutput).every(\n        (byte: unknown) =>\n          typeof byte === 'number' &&\n          Number.isInteger(byte) &&\n          byte >= 0 &&\n          byte <= 255,\n      )\n    ) {\n      throw new Error('Invalid passkey PRF byte array')\n    }\n    prfOutput = new Uint8Array(prfOutput)\n  }\n  const base = await crypto.subtle.importKey('raw', prfOutput, 'HKDF', false, [\n    'deriveKey',\n  ])\n  return crypto.subtle.deriveKey(\n    {\n      name: 'HKDF',\n      hash: 'SHA-256',\n      salt: new Uint8Array(0),\n      info: new TextEncoder().encode(HKDF_INFO),\n    },\n    base,\n    { name: 'AES-GCM', length: 256 },\n    false,\n    ['encrypt', 'decrypt'],\n  )\n}\n\nexport async function encryptKeyring(\n  key: CryptoKey,\n  keys: Keyring,\n): Promise<{ iv: ArrayBuffer; ciphertext: ArrayBuffer }> {\n  const iv = crypto.getRandomValues(new Uint8Array(12))\n  const plaintext = new TextEncoder().encode(JSON.stringify(keys))\n  const ciphertext = await crypto.subtle.encrypt(\n    { name: 'AES-GCM', iv },\n    key,\n    plaintext,\n  )\n  return { iv: iv.buffer, ciphertext }\n}\n\nexport async function decryptKeyring(\n  key: CryptoKey,\n  iv: BufferSource,\n  ciphertext: BufferSource,\n): Promise<Keyring> {\n  const plaintext = await crypto.subtle.decrypt(\n    { name: 'AES-GCM', iv },\n    key,\n    ciphertext,\n  )\n  const parsed: unknown = JSON.parse(new TextDecoder().decode(plaintext))\n  return sanitizeKeyring(parsed)\n}\n\n// ---------------------------------------------------------------------------\n// IndexedDB\n// ---------------------------------------------------------------------------\n\nfunction openDb(dbName: string): Promise<IDBDatabase> {\n  return new Promise((resolve, reject) => {\n    const request = indexedDB.open(dbName, 1)\n    request.onupgradeneeded = () => {\n      request.result.createObjectStore(STORE_NAME, { keyPath: 'id' })\n    }\n    request.onsuccess = () => resolve(request.result)\n    request.onerror = () => reject(request.error)\n  })\n}\n\nfunction idbGet(dbName: string): Promise<StoredRecord | null> {\n  return openDb(dbName).then(\n    (db) =>\n      new Promise((resolve, reject) => {\n        const request = db\n          .transaction(STORE_NAME, 'readonly')\n          .objectStore(STORE_NAME)\n          .get(RECORD_ID)\n        request.onsuccess = () => resolve(request.result ?? null)\n        request.onerror = () => reject(request.error)\n      }),\n  )\n}\n\nfunction idbPut(dbName: string, record: StoredRecord): Promise<void> {\n  return openDb(dbName).then(\n    (db) =>\n      new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE_NAME, 'readwrite')\n        tx.objectStore(STORE_NAME).put(record)\n        tx.oncomplete = () => resolve()\n        tx.onerror = () => reject(tx.error)\n      }),\n  )\n}\n\nfunction idbClear(dbName: string): Promise<void> {\n  return openDb(dbName).then(\n    (db) =>\n      new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE_NAME, 'readwrite')\n        tx.objectStore(STORE_NAME).delete(RECORD_ID)\n        tx.oncomplete = () => resolve()\n        tx.onerror = () => reject(tx.error)\n      }),\n  )\n}\n\n// ---------------------------------------------------------------------------\n// WebAuthn ceremonies\n// ---------------------------------------------------------------------------\n\nfunction requirePublicKeyCredential(\n  credential: Credential | null,\n  action: string,\n): PublicKeyCredential {\n  if (!credential) throw new Error(`Passkey ${action} was cancelled`)\n  if (!(credential instanceof PublicKeyCredential)) {\n    throw new Error(`Unexpected credential type during ${action}`)\n  }\n  return credential\n}\n\n/**\n * Some browsers (Dia, Safari) silently suppress `navigator.credentials.get()`\n * — no prompt, never resolves — when it runs without transient user activation.\n * The activation from a click expires (~5s) and is lost across enough async\n * work, so an unlock buried deep in a send pipeline just hangs. Fail fast with\n * a clear, catchable error so the app can re-run it from a fresh gesture.\n */\nfunction requireUserActivation(action: string): void {\n  // ponytail: only enforce where the API exists; absent means \"can't tell\", so\n  // fall through rather than block a ceremony that would have worked.\n  const activation = globalThis.navigator?.userActivation\n  if (activation && activation.isActive === false) {\n    throw new Error(\n      `Passkey ${action} needs a fresh user action (e.g. a click). Run it ` +\n        'directly from the event handler, before awaiting other work.',\n    )\n  }\n}\n\nasync function registerPasskey(\n  rpName: string,\n  userName: string,\n  rpId?: string,\n): Promise<{\n  credentialId: ArrayBuffer\n  salt: Uint8Array<ArrayBuffer>\n  prf?: BufferSource\n}> {\n  const salt = crypto.getRandomValues(new Uint8Array(32))\n  const credential = requirePublicKeyCredential(\n    await navigator.credentials.create({\n      publicKey: {\n        challenge: crypto.getRandomValues(new Uint8Array(32)),\n        // Omit `id` to let the browser bind the passkey to the current origin's\n        // effective domain; set it to scope across subdomains of a self-host.\n        rp: rpId ? { name: rpName, id: rpId } : { name: rpName },\n        user: {\n          id: crypto.getRandomValues(new Uint8Array(16)),\n          name: userName,\n          displayName: userName,\n        },\n        pubKeyCredParams: [\n          { type: 'public-key', alg: -7 },\n          { type: 'public-key', alg: -257 },\n        ],\n        authenticatorSelection: {\n          residentKey: 'required',\n          userVerification: 'required',\n        },\n        extensions: { prf: { eval: { first: salt } } },\n      },\n    }),\n    'registration',\n  )\n\n  const prf = credential.getClientExtensionResults().prf\n  if (!prf?.enabled) {\n    throw new Error(\n      'This authenticator does not support the WebAuthn PRF extension',\n    )\n  }\n  return { credentialId: credential.rawId, salt, prf: prf.results?.first }\n}\n\nasync function evaluatePrf(\n  credentialId: BufferSource,\n  salt: BufferSource,\n): Promise<BufferSource> {\n  const credential = requirePublicKeyCredential(\n    await navigator.credentials.get({\n      publicKey: {\n        challenge: crypto.getRandomValues(new Uint8Array(32)),\n        allowCredentials: [{ type: 'public-key', id: credentialId }],\n        userVerification: 'required',\n        extensions: { prf: { eval: { first: salt } } },\n      },\n    }),\n    'unlock',\n  )\n  const result = credential.getClientExtensionResults().prf?.results?.first\n  if (!result) {\n    throw new Error('Authenticator did not return a PRF result')\n  }\n  return result\n}\n\n// ---------------------------------------------------------------------------\n// Storage strategy\n// ---------------------------------------------------------------------------\n\nexport interface PasskeyStorageOptions {\n  /** Relying-party name shown in the passkey prompt. */\n  rpName?: string\n  /** Username label attached to the created passkey. */\n  userName?: string\n  /**\n   * WebAuthn Relying Party ID. Omit to bind the passkey to the current origin's\n   * effective domain (the default — no central/hardcoded domain). Set it to a\n   * registrable parent domain to share the credential across subdomains of your\n   * own deployment. The encrypted keyring is never portable across unrelated\n   * domains.\n   */\n  rpId?: string\n  /** IndexedDB database name. Defaults to `byok`. */\n  dbName?: string\n}\n\n/**\n * Passkey-encrypted persistence. `ByokClient` treats this as `unlockable`, so\n * nothing is decrypted until the user calls `unlock()` (or saves a key, which\n * registers a passkey on first use). The derived key is cached in memory for\n * the session so repeated saves don't re-prompt.\n */\nexport function passkeyStorage(\n  options: PasskeyStorageOptions = {},\n): KeyringStorage {\n  const rpName = options.rpName ?? 'BYOK'\n  const userName = options.userName ?? 'byok-keyring'\n  const { rpId } = options\n  const dbName = options.dbName ?? DEFAULT_DB\n\n  let cachedKey: CryptoKey | null = null\n  let cachedMeta: {\n    credentialId: ArrayBuffer\n    salt: Uint8Array<ArrayBuffer>\n  } | null = null\n\n  // Obtain the AES key, running exactly one WebAuthn ceremony if it isn't\n  // already cached for this session (unlock if a passkey exists, else register).\n  async function ensureKey(): Promise<{\n    key: CryptoKey\n    credentialId: ArrayBuffer\n    salt: Uint8Array<ArrayBuffer>\n  }> {\n    if (cachedKey && cachedMeta) {\n      return { key: cachedKey, ...cachedMeta }\n    }\n    const existing = await idbGet(dbName)\n    if (existing) {\n      requireUserActivation('unlock')\n      const prf = await evaluatePrf(existing.credentialId, existing.salt)\n      cachedKey = await deriveAesKey(prf)\n      cachedMeta = {\n        credentialId: existing.credentialId,\n        salt: new Uint8Array(existing.salt),\n      }\n    } else {\n      const reg = await registerPasskey(rpName, userName, rpId)\n      // Registration can consume activation. Let the browser handle its\n      // follow-up PRF ceremony rather than rejecting a valid new-key save.\n      const prf = reg.prf ?? (await evaluatePrf(reg.credentialId, reg.salt))\n      cachedKey = await deriveAesKey(prf)\n      cachedMeta = { credentialId: reg.credentialId, salt: reg.salt }\n    }\n    return { key: cachedKey, ...cachedMeta }\n  }\n\n  return {\n    id: 'passkey',\n    label: 'Passkey-encrypted (this device)',\n    persistent: true,\n    unlockable: true,\n    warning:\n      'Keys are encrypted with your passkey and unlocked with biometrics. ' +\n      'This protects saved keys if your device is stolen, but not against code ' +\n      'running on this page after you unlock.',\n    peek: async () => {\n      // Unencrypted last-4 sidecar — no key material, no unlock ceremony.\n      const existing = await idbGet(dbName)\n      return existing?.preview ?? {}\n    },\n    load: async () => {\n      const existing = await idbGet(dbName)\n      if (!existing) return {}\n      const { key } = await ensureKey()\n      return decryptKeyring(key, existing.iv, existing.ciphertext)\n    },\n    save: async (keys) => {\n      const existing = await idbGet(dbName)\n      const hasKeys = Object.values(keys).some(Boolean)\n      // First save with an empty keyring is a no-op — avoids a passkey ceremony\n      // when another storage tier writes an empty ring.\n      if (!hasKeys && !existing) return\n\n      const { key, credentialId, salt } = await ensureKey()\n      const { iv, ciphertext } = await encryptKeyring(key, keys)\n      await idbPut(dbName, {\n        id: RECORD_ID,\n        credentialId,\n        salt: salt.buffer,\n        iv,\n        ciphertext,\n        preview: previewOf(keys),\n      })\n    },\n    clear: async () => {\n      cachedKey = null\n      cachedMeta = null\n      await idbClear(dbName)\n    },\n  }\n}\n\n/**\n * Passkey-encrypted storage when WebAuthn is available in a secure context.\n * Otherwise session memory, with a warning — this is not an automatic PRF\n * fallback. First save still throws if the authenticator lacks PRF.\n */\nexport function defaultByokStorage(\n  options?: PasskeyStorageOptions,\n): KeyringStorage {\n  const secure =\n    typeof globalThis.isSecureContext !== 'boolean' ||\n    globalThis.isSecureContext\n  if (!isPasskeyStorageSupported() || !secure) {\n    return {\n      ...memoryStorage(),\n      warning:\n        'Passkeys are unavailable in this context. Keys stay in memory for this tab only.',\n    }\n  }\n  return passkeyStorage(options)\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkBA,IAAM,aAAa;AACnB,IAAM,YAAY;AAClB,IAAM,YAAY;AAClB,IAAM,aAAa;AAoBnB,SAAS,gBAAgB,OAAyB;CAChD,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,CAAC;CACzD,MAAM,OAAgB,CAAC;CACvB,KAAK,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,KAAK,GAChD,IAAI,aAAa,QAAQ,KAAK,OAAO,QAAQ,YAAY,IAAI,SAAS,GACpE,KAAK,YAAY;CAGrB,OAAO;AACT;;AAGA,SAAS,UAAU,MAA2B;CAC5C,MAAM,UAAsB,CAAC;CAC7B,KAAK,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,IAAI,GAAG;EAClD,IAAI,CAAC,OAAO,CAAC,aAAa,QAAQ,GAAG;EAErC,QAAQ,YAAY,IAAI,SAAS,IAAI,IAAI,MAAM,EAAE,IAAI;CACvD;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,4BAAqC;CACnD,OACE,OAAO,eAAe,eACtB,OAAO,WAAW,wBAAwB,eAC1C,OAAO,WAAW,cAAc,eAChC,OAAO,WAAW,UAAU,YAAY,WAAW;AAEvD;;AAOA,eAAsB,aACpB,WACoB;CAEpB,IAAI,MAAM,QAAQ,SAAS,GAAG;EAC5B,IACE,UAAU,WAAW,MACrB,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,OACpB,SACC,OAAO,SAAS,YAChB,OAAO,UAAU,IAAI,KACrB,QAAQ,KACR,QAAQ,GACZ,GAEA,MAAM,IAAI,MAAM,gCAAgC;EAElD,YAAY,IAAI,WAAW,SAAS;CACtC;CACA,MAAM,OAAO,MAAM,OAAO,OAAO,UAAU,OAAO,WAAW,QAAQ,OAAO,CAC1E,WACF,CAAC;CACD,OAAO,OAAO,OAAO,UACnB;EACE,MAAM;EACN,MAAM;EACN,sBAAM,IAAI,WAAW,CAAC;EACtB,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,SAAS;CAC1C,GACA,MACA;EAAE,MAAM;EAAW,QAAQ;CAAI,GAC/B,OACA,CAAC,WAAW,SAAS,CACvB;AACF;AAEA,eAAsB,eACpB,KACA,MACuD;CACvD,MAAM,KAAK,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;CACpD,MAAM,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC;CAC/D,MAAM,aAAa,MAAM,OAAO,OAAO,QACrC;EAAE,MAAM;EAAW;CAAG,GACtB,KACA,SACF;CACA,OAAO;EAAE,IAAI,GAAG;EAAQ;CAAW;AACrC;AAEA,eAAsB,eACpB,KACA,IACA,YACkB;CAClB,MAAM,YAAY,MAAM,OAAO,OAAO,QACpC;EAAE,MAAM;EAAW;CAAG,GACtB,KACA,UACF;CAEA,OAAO,gBADiB,KAAK,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,SAAS,CAC9C,CAAM;AAC/B;AAMA,SAAS,OAAO,QAAsC;CACpD,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,UAAU,UAAU,KAAK,QAAQ,CAAC;EACxC,QAAQ,wBAAwB;GAC9B,QAAQ,OAAO,kBAAkB,YAAY,EAAE,SAAS,KAAK,CAAC;EAChE;EACA,QAAQ,kBAAkB,QAAQ,QAAQ,MAAM;EAChD,QAAQ,gBAAgB,OAAO,QAAQ,KAAK;CAC9C,CAAC;AACH;AAEA,SAAS,OAAO,QAA8C;CAC5D,OAAO,OAAO,MAAM,CAAC,CAAC,MACnB,OACC,IAAI,SAAS,SAAS,WAAW;EAC/B,MAAM,UAAU,GACb,YAAY,YAAY,UAAU,CAAC,CACnC,YAAY,UAAU,CAAC,CACvB,IAAI,SAAS;EAChB,QAAQ,kBAAkB,QAAQ,QAAQ,UAAU,IAAI;EACxD,QAAQ,gBAAgB,OAAO,QAAQ,KAAK;CAC9C,CAAC,CACL;AACF;AAEA,SAAS,OAAO,QAAgB,QAAqC;CACnE,OAAO,OAAO,MAAM,CAAC,CAAC,MACnB,OACC,IAAI,SAAS,SAAS,WAAW;EAC/B,MAAM,KAAK,GAAG,YAAY,YAAY,WAAW;EACjD,GAAG,YAAY,UAAU,CAAC,CAAC,IAAI,MAAM;EACrC,GAAG,mBAAmB,QAAQ;EAC9B,GAAG,gBAAgB,OAAO,GAAG,KAAK;CACpC,CAAC,CACL;AACF;AAEA,SAAS,SAAS,QAA+B;CAC/C,OAAO,OAAO,MAAM,CAAC,CAAC,MACnB,OACC,IAAI,SAAS,SAAS,WAAW;EAC/B,MAAM,KAAK,GAAG,YAAY,YAAY,WAAW;EACjD,GAAG,YAAY,UAAU,CAAC,CAAC,OAAO,SAAS;EAC3C,GAAG,mBAAmB,QAAQ;EAC9B,GAAG,gBAAgB,OAAO,GAAG,KAAK;CACpC,CAAC,CACL;AACF;AAMA,SAAS,2BACP,YACA,QACqB;CACrB,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,WAAW,OAAO,eAAe;CAClE,IAAI,EAAE,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,qCAAqC,QAAQ;CAE/D,OAAO;AACT;;;;;;;;AASA,SAAS,sBAAsB,QAAsB;CAGnD,MAAM,aAAa,WAAW,WAAW;CACzC,IAAI,cAAc,WAAW,aAAa,OACxC,MAAM,IAAI,MACR,WAAW,OAAO,+GAEpB;AAEJ;AAEA,eAAe,gBACb,QACA,UACA,MAKC;CACD,MAAM,OAAO,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;CACtD,MAAM,aAAa,2BACjB,MAAM,UAAU,YAAY,OAAO,EACjC,WAAW;EACT,WAAW,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;EAGpD,IAAI,OAAO;GAAE,MAAM;GAAQ,IAAI;EAAK,IAAI,EAAE,MAAM,OAAO;EACvD,MAAM;GACJ,IAAI,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;GAC7C,MAAM;GACN,aAAa;EACf;EACA,kBAAkB,CAChB;GAAE,MAAM;GAAc,KAAK;EAAG,GAC9B;GAAE,MAAM;GAAc,KAAK;EAAK,CAClC;EACA,wBAAwB;GACtB,aAAa;GACb,kBAAkB;EACpB;EACA,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,KAAK,EAAE,EAAE;CAC/C,EACF,CAAC,GACD,cACF;CAEA,MAAM,MAAM,WAAW,0BAA0B,CAAC,CAAC;CACnD,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,MACR,gEACF;CAEF,OAAO;EAAE,cAAc,WAAW;EAAO;EAAM,KAAK,IAAI,SAAS;CAAM;AACzE;AAEA,eAAe,YACb,cACA,MACuB;CAYvB,MAAM,SAXa,2BACjB,MAAM,UAAU,YAAY,IAAI,EAC9B,WAAW;EACT,WAAW,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;EACpD,kBAAkB,CAAC;GAAE,MAAM;GAAc,IAAI;EAAa,CAAC;EAC3D,kBAAkB;EAClB,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,KAAK,EAAE,EAAE;CAC/C,EACF,CAAC,GACD,QAEa,CAAA,CAAW,0BAA0B,CAAC,CAAC,KAAK,SAAS;CACpE,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,2CAA2C;CAE7D,OAAO;AACT;;;;;;;AA6BA,SAAgB,eACd,UAAiC,CAAC,GAClB;CAChB,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,WAAW,QAAQ,YAAY;CACrC,MAAM,EAAE,SAAS;CACjB,MAAM,SAAS,QAAQ,UAAU;CAEjC,IAAI,YAA8B;CAClC,IAAI,aAGO;CAIX,eAAe,YAIZ;EACD,IAAI,aAAa,YACf,OAAO;GAAE,KAAK;GAAW,GAAG;EAAW;EAEzC,MAAM,WAAW,MAAM,OAAO,MAAM;EACpC,IAAI,UAAU;GACZ,sBAAsB,QAAQ;GAE9B,YAAY,MAAM,aAAa,MADb,YAAY,SAAS,cAAc,SAAS,IAAI,CAChC;GAClC,aAAa;IACX,cAAc,SAAS;IACvB,MAAM,IAAI,WAAW,SAAS,IAAI;GACpC;EACF,OAAO;GACL,MAAM,MAAM,MAAM,gBAAgB,QAAQ,UAAU,IAAI;GAIxD,YAAY,MAAM,aADN,IAAI,OAAQ,MAAM,YAAY,IAAI,cAAc,IAAI,IAAI,CAClC;GAClC,aAAa;IAAE,cAAc,IAAI;IAAc,MAAM,IAAI;GAAK;EAChE;EACA,OAAO;GAAE,KAAK;GAAW,GAAG;EAAW;CACzC;CAEA,OAAO;EACL,IAAI;EACJ,OAAO;EACP,YAAY;EACZ,YAAY;EACZ,SACE;EAGF,MAAM,YAAY;GAGhB,QAAO,MADgB,OAAO,MAAM,EAAA,EACnB,WAAW,CAAC;EAC/B;EACA,MAAM,YAAY;GAChB,MAAM,WAAW,MAAM,OAAO,MAAM;GACpC,IAAI,CAAC,UAAU,OAAO,CAAC;GACvB,MAAM,EAAE,QAAQ,MAAM,UAAU;GAChC,OAAO,eAAe,KAAK,SAAS,IAAI,SAAS,UAAU;EAC7D;EACA,MAAM,OAAO,SAAS;GACpB,MAAM,WAAW,MAAM,OAAO,MAAM;GAIpC,IAAI,CAHY,OAAO,OAAO,IAAI,CAAC,CAAC,KAAK,OAGpC,KAAW,CAAC,UAAU;GAE3B,MAAM,EAAE,KAAK,cAAc,SAAS,MAAM,UAAU;GACpD,MAAM,EAAE,IAAI,eAAe,MAAM,eAAe,KAAK,IAAI;GACzD,MAAM,OAAO,QAAQ;IACnB,IAAI;IACJ;IACA,MAAM,KAAK;IACX;IACA;IACA,SAAS,UAAU,IAAI;GACzB,CAAC;EACH;EACA,OAAO,YAAY;GACjB,YAAY;GACZ,aAAa;GACb,MAAM,SAAS,MAAM;EACvB;CACF;AACF;;;;;;AAOA,SAAgB,mBACd,SACgB;CAChB,MAAM,SACJ,OAAO,WAAW,oBAAoB,aACtC,WAAW;CACb,IAAI,CAAC,0BAA0B,KAAK,CAAC,QACnC,OAAO;EACL,GAAG,cAAc;EACjB,SACE;CACJ;CAEF,OAAO,eAAe,OAAO;AAC/B"}

package/dist/esm/chat-client.d.ts

@@ -380,8 +380,6 @@ export declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = an
     sendMessage(content: string | MultimodalContent, body?: Record<string, any>, sendOptions?: SendMessageOptions): Promise<void>;
     /** True while interrupt descriptors still own continuation. */
     private hasPendingInterrupts;
-    /** True while an interrupt batch owns the next user turn. */
-    private hasBlockingInterrupts;
     /** True while a stream is active, a send is claiming the client, or the queue is draining. */
     private isSendBusy;
     private resolveBusyReason;

package/dist/esm/chat-client.js

@@ -1111,7 +1111,7 @@ var ChatClient = class {
 	async sendMessage(content, body, sendOptions) {
 		this.mountDevtools();
 		if (typeof content === "string" && !content.trim()) return;
-		if (this.hasBlockingInterrupts()) throw new Error("ChatClient: cannot send normal input while pending interrupts exist. Use resumeInterrupts() instead.");
+		if (this.hasPendingInterrupts()) throw new Error("ChatClient: cannot send normal input while pending interrupts exist. Use resumeInterrupts() instead.");
 		const resolvedBody = {
 			...body,
 			...sendOptions?.body
@@ -1138,10 +1138,6 @@ var ChatClient = class {
 	hasPendingInterrupts() {
 		return this.interruptManager.getDescriptors().length > 0;
 	}
-	/** True while an interrupt batch owns the next user turn. */
-	hasBlockingInterrupts() {
-		return this.activeInterruptSubmission !== void 0 || this.hasPendingInterrupts();
-	}
 	/** True while a stream is active, a send is claiming the client, or the queue is draining. */
 	isSendBusy() {
 		return this.isLoading || this.sendInFlight || this.messageQueueDraining;
@@ -1233,7 +1229,7 @@ var ChatClient = class {
 	*/
 	async append(message) {
 		this.mountDevtools();
-		if (this.hasBlockingInterrupts()) throw new Error("ChatClient: cannot append normal input while pending interrupts exist. Use resumeInterrupts() instead.");
+		if (this.hasPendingInterrupts()) throw new Error("ChatClient: cannot append normal input while pending interrupts exist. Use resumeInterrupts() instead.");
 		const normalizedMessage = normalizeToUIMessage(message, generateMessageId);
 		if (normalizedMessage.role === "system") return;
 		const uiMessage = normalizedMessage;