[FEATURE]: Add Maple AI (private TEE) to the providers list

[marksftw]

Feature hasn't been suggested before.

• I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

Maple AI (https://trymaple.ai) is a private AI provider that performs end-to-end encryption using TEEs. Our users frequently request that we get official support inside OpenCode. I built and tested it and have it ready to go in my fork.

Maple runs a proxy that handles all encryption and decryption with the backend. OpenCode talks to the user's proxy URL and uses an API key that the user generates in Maple.

Main reasons users want this:

1. Write code using largest open models while preserving privacy
2. Non-technical users want to give OpenCode access to their filesystem while not giving Claude the content of their files, so they prefer to have Maple's open models talking to their files

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• [FEATURE]: Add privatemode-ai provider #7952: [FEATURE]: Add privatemode-ai provider - Also requests an end-to-end encrypted AI provider for privacy-conscious users in regulated industries

Feel free to ignore if this is not applicable to your specific case.

[marksftw]

This issue might be a duplicate of existing issues. Please check:

• [FEATURE]: Add privatemode-ai provider #7952: [FEATURE]: Add privatemode-ai provider - Also requests an end-to-end encrypted AI provider for privacy-conscious users in regulated industries

Feel free to ignore if this is not applicable to your specific case.

Thanks for checking, but this isn't a duplicate.

[marksftw]

With Claude being down, I'm checking back if this item has a chance of moving forward.

[Murad-Awad]

Hey @marksftw my understanding is that maple AI stores chat data in postgres with AWS KMS keys (with a PCR policy). Doesn't that allow Maple/OpenSecret's enclave code to decrypt the conversation content after it is generated at any point?

[marksftw]

@Murad-Awad yes, enclave code can decrypt the conversation content, which is how it is able to function. when Maple deploys updates, new code can access historical data because KMS policies are updated to recognize the new measurements. any update is published first as open source for visibility into data handling, and the enclave provides attestations to prove that the open source code matches what is running in AWS.