@flowdrop/flowdrop 2.0.0-beta.1 → 2.0.0-beta.2

package/dist/display/index.d.ts

@@ -5,9 +5,13 @@
  *
  * @module display
  *
+ * This entry renders user/API-provided HTML, so it pulls in the HTML sanitizer
+ * (DOMPurify). `sanitizeHtml` is exposed here — rather than from
+ * `@flowdrop/flowdrop/core` — to keep `core` free of that heavier dependency.
+ *
  * @example
  * ```typescript
- * import { MarkdownDisplay } from "@flowdrop/flowdrop/display";
+ * import { MarkdownDisplay, sanitizeHtml } from "@flowdrop/flowdrop/display";
  * ```
  *
  * @example In Svelte:
@@ -25,3 +29,4 @@
  * ```
  */
 export { default as MarkdownDisplay } from '../components/MarkdownDisplay.svelte';
+export { sanitizeHtml } from '../utils/sanitize.js';

package/dist/display/index.js

@@ -5,9 +5,13 @@
  *
  * @module display
  *
+ * This entry renders user/API-provided HTML, so it pulls in the HTML sanitizer
+ * (DOMPurify). `sanitizeHtml` is exposed here — rather than from
+ * `@flowdrop/flowdrop/core` — to keep `core` free of that heavier dependency.
+ *
  * @example
  * ```typescript
- * import { MarkdownDisplay } from "@flowdrop/flowdrop/display";
+ * import { MarkdownDisplay, sanitizeHtml } from "@flowdrop/flowdrop/display";
  * ```
  *
  * @example In Svelte:
@@ -28,3 +32,7 @@
 // Display Components
 // ============================================================================
 export { default as MarkdownDisplay } from '../components/MarkdownDisplay.svelte';
+// ============================================================================
+// HTML Sanitization (DOMPurify-backed — lives here, not in core)
+// ============================================================================
+export { sanitizeHtml } from '../utils/sanitize.js';

package/dist/editor/index.d.ts

@@ -74,7 +74,7 @@ export { PortCoordinateStore } from '../stores/portCoordinateStore.svelte.js';
 export { HistoryService } from '../services/historyService.js';
 export type { HistoryEntry, HistoryState, PushOptions } from '../stores/historyStore.svelte.js';
 export { showSuccess, showError, showWarning, showInfo, showLoading, dismissToast, dismissAllToasts, showPromise, showConfirmation, apiToasts, workflowToasts, pipelineToasts } from '../services/toastService.js';
-export { NodeExecutionService, nodeExecutionService } from '../services/nodeExecutionService.js';
+export { NodeExecutionService } from '../services/nodeExecutionService.js';
 export { saveWorkflow, updateWorkflow, getWorkflow, getWorkflows, deleteWorkflow, getWorkflowCount, initializeSampleWorkflows } from '../services/workflowStorage.js';
 export { globalSaveWorkflow, globalExportWorkflow } from '../services/globalSave.js';
 export { fetchPortConfig, validatePortConfig } from '../services/portConfigApi.js';

package/dist/editor/index.js

@@ -109,7 +109,7 @@ export { HistoryService } from '../services/historyService.js';
 // Services
 // ============================================================================
 export { showSuccess, showError, showWarning, showInfo, showLoading, dismissToast, dismissAllToasts, showPromise, showConfirmation, apiToasts, workflowToasts, pipelineToasts } from '../services/toastService.js';
-export { NodeExecutionService, nodeExecutionService } from '../services/nodeExecutionService.js';
+export { NodeExecutionService } from '../services/nodeExecutionService.js';
 export { saveWorkflow, updateWorkflow, getWorkflow, getWorkflows, deleteWorkflow, getWorkflowCount, initializeSampleWorkflows } from '../services/workflowStorage.js';
 export { globalSaveWorkflow, globalExportWorkflow } from '../services/globalSave.js';
 export { fetchPortConfig, validatePortConfig } from '../services/portConfigApi.js';

package/dist/form/full.d.ts

@@ -20,7 +20,8 @@
  * // Now all field types are available
  * ```
  */
-export { SchemaForm, FormField, FormFieldFull, FormFieldWrapper, FormTextField, FormTextarea, FormNumberField, FormRangeField, FormToggle, FormSelect, FormCheckboxGroup, FormArray, FormFieldset, FormUISchemaRenderer } from './index.js';
+export { default as FormFieldFull } from '../components/form/FormField.svelte';
+export { SchemaForm, FormField, FormFieldWrapper, FormTextField, FormTextarea, FormNumberField, FormRangeField, FormToggle, FormSelect, FormCheckboxGroup, FormArray, FormFieldset, FormUISchemaRenderer } from './index.js';
 export type { FieldSchema, FieldType, FieldFormat, FieldOption, OneOfItem, SchemaFormProps, BaseFieldProps, TextFieldProps, TextareaFieldProps, NumberFieldProps, ToggleFieldProps, RangeFieldProps, SelectFieldProps, CheckboxGroupFieldProps, ArrayFieldProps, FormFieldFactoryProps, FormFieldWrapperProps, FieldComponentProps, FieldMatcher, FieldMatcherRegistration, FieldComponent, FieldComponentRegistration } from './index.js';
 export { isFieldOptionArray, isOneOfArray, normalizeOptions, oneOfToOptions, getSchemaOptions } from './index.js';
 export { FieldComponentRegistry, hiddenFieldMatcher, checkboxGroupMatcher, enumSelectMatcher, textareaMatcher, rangeMatcher, textFieldMatcher, numberFieldMatcher, toggleMatcher, selectOptionsMatcher, arrayMatcher } from './index.js';

package/dist/form/full.js

@@ -21,8 +21,11 @@
  * ```
  */
 // Re-export everything from the light form module
+// The "everything statically bundled" FormField variant lives here (this is the
+// heavy entry), not in the light `@flowdrop/flowdrop/form`.
+export { default as FormFieldFull } from '../components/form/FormField.svelte';
 // Components
-export { SchemaForm, FormField, FormFieldFull, FormFieldWrapper, FormTextField, FormTextarea, FormNumberField, FormRangeField, FormToggle, FormSelect, FormCheckboxGroup, FormArray, FormFieldset, FormUISchemaRenderer } from './index.js';
+export { SchemaForm, FormField, FormFieldWrapper, FormTextField, FormTextarea, FormNumberField, FormRangeField, FormToggle, FormSelect, FormCheckboxGroup, FormArray, FormFieldset, FormUISchemaRenderer } from './index.js';
 // Utility functions
 export { isFieldOptionArray, isOneOfArray, normalizeOptions, oneOfToOptions, getSchemaOptions } from './index.js';
 // Field Registry

package/dist/form/index.d.ts

@@ -59,7 +59,6 @@
  */
 export { default as SchemaForm } from '../components/SchemaForm.svelte';
 export { default as FormField } from '../components/form/FormFieldLight.svelte';
-export { default as FormFieldFull } from '../components/form/FormField.svelte';
 export { default as FormFieldWrapper } from '../components/form/FormFieldWrapper.svelte';
 export { default as FormTextField } from '../components/form/FormTextField.svelte';
 export { default as FormTextarea } from '../components/form/FormTextarea.svelte';

package/dist/form/index.js

@@ -66,8 +66,9 @@ export { default as SchemaForm } from '../components/SchemaForm.svelte';
 // ============================================================================
 // Use the light version of FormField that uses the registry for heavy editors
 export { default as FormField } from '../components/form/FormFieldLight.svelte';
-// Also export the original (full) version for users who want everything
-export { default as FormFieldFull } from '../components/form/FormField.svelte';
+// NOTE: `FormFieldFull` — the variant that *statically* bundles every editor
+// (including CodeMirror) — is intentionally NOT exported here; it would pull
+// CodeMirror into this light entry. Import it from `@flowdrop/flowdrop/form/full`.
 export { default as FormFieldWrapper } from '../components/form/FormFieldWrapper.svelte';
 export { default as FormTextField } from '../components/form/FormTextField.svelte';
 export { default as FormTextarea } from '../components/form/FormTextarea.svelte';

package/dist/helpers/workflowEditorHelper.d.ts

@@ -5,6 +5,7 @@
 import type { WorkflowNode as WorkflowNodeType, NodeMetadata, Workflow, WorkflowEdge, NodeExecutionInfo } from '../types/index.js';
 import { type FlowDropInstance } from '../stores/instanceContainer.svelte.js';
 import type { ApiContext } from '../stores/apiContext.js';
+import type { AuthProvider } from '../types/auth.js';
 import type { EndpointConfig } from '../config/endpoints.js';
 export { generateNodeId, extractConfigDefaults } from '../utils/nodeIds.js';
 /**
@@ -134,7 +135,8 @@ export declare class WorkflowOperationsHelper {
  */
 export declare class ConfigurationHelper {
     /**
-     * Configure API endpoints on the given instance's API context.
+     * Configure API endpoints (and optionally the auth provider) on the given
+     * instance's API context.
      */
-    static configureEndpoints(api: ApiContext, config: EndpointConfig): void;
+    static configureEndpoints(api: ApiContext, config: EndpointConfig, authProvider?: AuthProvider): void;
 }

package/dist/helpers/workflowEditorHelper.js

@@ -382,9 +382,10 @@ export class WorkflowOperationsHelper {
  */
 export class ConfigurationHelper {
     /**
-     * Configure API endpoints on the given instance's API context.
+     * Configure API endpoints (and optionally the auth provider) on the given
+     * instance's API context.
      */
-    static configureEndpoints(api, config) {
-        api.configure(config);
+    static configureEndpoints(api, config, authProvider) {
+        api.configure(config, authProvider);
     }
 }

package/dist/playground/index.d.ts

@@ -126,8 +126,8 @@ export { default as InputCollector } from '../components/playground/InputCollect
 export { default as ExecutionLogs } from '../components/playground/ExecutionLogs.svelte';
 export { default as MessageBubble } from '../components/playground/MessageBubble.svelte';
 export { InterruptBubble, ConfirmationPrompt, ChoicePrompt, TextInputPrompt, FormPrompt, ReviewPrompt } from '../components/interrupt/index.js';
-export { PlaygroundService, playgroundService } from '../services/playgroundService.js';
-export { InterruptService, interruptService } from '../services/interruptService.js';
+export { PlaygroundService } from '../services/playgroundService.js';
+export { InterruptService } from '../services/interruptService.js';
 export { PlaygroundStore } from '../stores/playgroundStore.svelte.js';
 export type { PlaygroundSession, PlaygroundMessage, PlaygroundInputField, PlaygroundMessageRequest, PlaygroundMessagesResult, PlaygroundConfig, PlaygroundMode, PlaygroundSessionStatus, PlaygroundMessageRole, PlaygroundMessageLevel, PlaygroundMessageMetadata, PlaygroundApiResponse, PlaygroundSessionsResponse, PlaygroundSessionResponse, PlaygroundMessageResponse, PlaygroundMessagesApiResponse, PlaygroundExecution } from '../types/playground.js';
 export { isChatInputNode, CHAT_INPUT_PATTERNS, defaultShouldStopPolling, defaultIsTerminalStatus, DEFAULT_STOP_POLLING_STATUSES, DEFAULT_TERMINAL_STATUSES } from '../types/playground.js';

package/dist/playground/index.js

@@ -135,11 +135,11 @@ export { InterruptBubble, ConfirmationPrompt, ChoicePrompt, TextInputPrompt, For
 // ============================================================================
 // Playground Service
 // ============================================================================
-export { PlaygroundService, playgroundService } from '../services/playgroundService.js';
+export { PlaygroundService } from '../services/playgroundService.js';
 // ============================================================================
 // Interrupt Service (Human-in-the-Loop)
 // ============================================================================
-export { InterruptService, interruptService } from '../services/interruptService.js';
+export { InterruptService } from '../services/interruptService.js';
 // ============================================================================
 // Playground Store
 // ============================================================================

package/dist/playground/mount.d.ts

@@ -45,6 +45,7 @@
  */
 import type { Workflow } from '../types/index.js';
 import type { EndpointConfig } from '../config/endpoints.js';
+import type { AuthProvider } from '../types/auth.js';
 import type { PlaygroundMode, PlaygroundConfig, PlaygroundSession, PlaygroundMessagesApiResponse, PlaygroundSessionStatus } from '../types/playground.js';
 import type { PartialSettings, SettingsCategory } from '../types/settings.js';
 import type { NavbarAction } from '../types/navbar.js';
@@ -81,6 +82,15 @@ export interface PlaygroundMountOptions {
      * Use createEndpointConfig() to create this
      */
     endpointConfig?: EndpointConfig;
+    /**
+     * Authentication provider for API requests.
+     *
+     * Applied to this instance via `fd.api.configure()` so every request the
+     * playground makes (sessions, messages, polling, interrupts) carries the
+     * provider's headers — e.g. an `Authorization` bearer token or an
+     * `X-CSRF-Token`. Omit for unauthenticated backends.
+     */
+    authProvider?: AuthProvider;
     /**
      * Playground-specific configuration options
      */

package/dist/playground/mount.js

@@ -125,7 +125,7 @@ function buildMountedPlayground(svelteApp, workflowId, config, fd, ownsInstance,
         startPolling: () => {
             const session = fd.playground.currentSession;
             if (session) {
-                playgroundService.startPolling(fd.api.config, session.id, (response) => fd.playground.applyServerResponse(response, session.id), pollingInterval, config.shouldStopPolling, playgroundService.getLastSequenceNumber());
+                playgroundService.startPolling(fd.api.config, session.id, (response) => fd.playground.applyServerResponse(response, session.id), pollingInterval, config.shouldStopPolling, playgroundService.getLastSequenceNumber(), fd.api.authProvider);
             }
         },
         pushMessages: (response) => fd.playground.applyServerResponse(response, null),
@@ -165,7 +165,7 @@ function buildMountedPlayground(svelteApp, workflowId, config, fd, ownsInstance,
  * ```
  */
 export async function mountPlayground(container, options) {
-    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, config = {}, height, width, settings: initialSettings, onClose, onSessionStatusChange, instanceId } = options;
+    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, authProvider, config = {}, height, width, settings: initialSettings, onClose, onSessionStatusChange, instanceId } = options;
     // Validate required parameters
     if (!workflowId) {
         throw new Error('workflowId is required for mountPlayground()');
@@ -200,6 +200,7 @@ export async function mountPlayground(container, options) {
                 workflow,
                 initialSessionId,
                 endpointConfig: finalEndpointConfig,
+                authProvider,
                 config,
                 onClose: () => {
                     if (onClose) {
@@ -219,6 +220,7 @@ export async function mountPlayground(container, options) {
                 mode,
                 initialSessionId,
                 endpointConfig: finalEndpointConfig,
+                authProvider,
                 config,
                 onClose
             }
@@ -247,7 +249,7 @@ export function unmountPlayground(app) {
     }
 }
 export async function mountPlaygroundStudio(container, options) {
-    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, config = {}, height, width, initialPipelineOpen, minChatWidth, initialPipelineWidth, settings: initialSettings, onClose, onSessionNavigate, onSessionStatusChange, pipelineViews, instanceId } = options;
+    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, authProvider, config = {}, height, width, initialPipelineOpen, minChatWidth, initialPipelineWidth, settings: initialSettings, onClose, onSessionNavigate, onSessionStatusChange, pipelineViews, instanceId } = options;
     if (!workflowId) {
         throw new Error('workflowId is required for mountPlaygroundStudio()');
     }
@@ -272,6 +274,7 @@ export async function mountPlaygroundStudio(container, options) {
             mode,
             initialSessionId,
             endpointConfig: finalEndpointConfig,
+            authProvider,
             config,
             onClose,
             onSessionNavigate,
@@ -304,7 +307,7 @@ export async function mountPlaygroundStudio(container, options) {
  * ```
  */
 export async function mountPlaygroundApp(container, options) {
-    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, config = {}, height, width, showNavbar = true, navbarTitle, primaryActions, showSettings = true, settingsCategories, showSettingsSyncButton, showSettingsResetButton, initialPipelineOpen, minChatWidth, initialPipelineWidth, settings: initialSettings, onClose, onSessionNavigate, onSessionStatusChange, instanceId } = options;
+    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, authProvider, config = {}, height, width, showNavbar = true, navbarTitle, primaryActions, showSettings = true, settingsCategories, showSettingsSyncButton, showSettingsResetButton, initialPipelineOpen, minChatWidth, initialPipelineWidth, settings: initialSettings, onClose, onSessionNavigate, onSessionStatusChange, instanceId } = options;
     if (!workflowId) {
         throw new Error('workflowId is required for mountPlaygroundApp()');
     }
@@ -332,6 +335,7 @@ export async function mountPlaygroundApp(container, options) {
             mode,
             initialSessionId,
             endpointConfig: finalEndpointConfig,
+            authProvider,
             config,
             showNavbar,
             navbarTitle,

package/dist/registry/builtinNodeTypes.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Built-in Node Type Metadata (pure — no component imports)
+ *
+ * The type identifiers, aliases, and resolution helpers for FlowDrop's built-in
+ * node types, with ZERO dependency on the Svelte node components. Utilities that
+ * only need to reason about type strings (e.g. `utils/nodeTypes.ts`, reachable
+ * from `@flowdrop/flowdrop/core`) import from here, so the lightweight `core`
+ * entry never statically pulls in node components, marked, or DOMPurify.
+ *
+ * The component registrations themselves live in `./builtinNodes.ts`, which
+ * re-exports everything here for backward compatibility.
+ *
+ * @module registry/builtinNodeTypes
+ */
+/**
+ * Source identifier for built-in FlowDrop components.
+ */
+export declare const FLOWDROP_SOURCE = "flowdrop";
+/**
+ * Type for built-in node types.
+ * Use this when you specifically need a built-in type.
+ */
+export type BuiltinNodeType = 'workflowNode' | 'simple' | 'square' | 'atom' | 'tool' | 'gateway' | 'note' | 'terminal' | 'idea';
+/**
+ * Array of built-in type strings for runtime validation.
+ */
+export declare const BUILTIN_NODE_TYPES: BuiltinNodeType[];
+/**
+ * Alias mapping for type resolution.
+ * Maps alternative type names to their canonical registration.
+ */
+export declare const BUILTIN_TYPE_ALIASES: Record<string, string>;
+/**
+ * Get the canonical type for a given type string.
+ * Handles aliases like "default" -> "workflowNode".
+ *
+ * @param type - The type string to resolve
+ * @returns The canonical type string
+ */
+export declare function resolveBuiltinAlias(type: string): string;
+/**
+ * Check if a type is a built-in FlowDrop type.
+ *
+ * @param type - The type to check
+ * @returns true if this is a built-in type
+ */
+export declare function isBuiltinType(type: string): boolean;
+/**
+ * Get all built-in type identifiers.
+ *
+ * @returns Array of built-in type strings
+ */
+export declare function getBuiltinTypes(): string[];

package/dist/registry/builtinNodeTypes.js

@@ -0,0 +1,67 @@
+/**
+ * Built-in Node Type Metadata (pure — no component imports)
+ *
+ * The type identifiers, aliases, and resolution helpers for FlowDrop's built-in
+ * node types, with ZERO dependency on the Svelte node components. Utilities that
+ * only need to reason about type strings (e.g. `utils/nodeTypes.ts`, reachable
+ * from `@flowdrop/flowdrop/core`) import from here, so the lightweight `core`
+ * entry never statically pulls in node components, marked, or DOMPurify.
+ *
+ * The component registrations themselves live in `./builtinNodes.ts`, which
+ * re-exports everything here for backward compatibility.
+ *
+ * @module registry/builtinNodeTypes
+ */
+/**
+ * Source identifier for built-in FlowDrop components.
+ */
+export const FLOWDROP_SOURCE = 'flowdrop';
+/**
+ * Array of built-in type strings for runtime validation.
+ */
+export const BUILTIN_NODE_TYPES = [
+    'workflowNode',
+    'simple',
+    'square',
+    'atom',
+    'tool',
+    'gateway',
+    'note',
+    'terminal',
+    'idea'
+];
+/**
+ * Alias mapping for type resolution.
+ * Maps alternative type names to their canonical registration.
+ */
+export const BUILTIN_TYPE_ALIASES = {
+    default: 'workflowNode'
+};
+/**
+ * Get the canonical type for a given type string.
+ * Handles aliases like "default" -> "workflowNode".
+ *
+ * @param type - The type string to resolve
+ * @returns The canonical type string
+ */
+export function resolveBuiltinAlias(type) {
+    return BUILTIN_TYPE_ALIASES[type] ?? type;
+}
+/**
+ * Check if a type is a built-in FlowDrop type.
+ *
+ * @param type - The type to check
+ * @returns true if this is a built-in type
+ */
+export function isBuiltinType(type) {
+    const canonicalType = resolveBuiltinAlias(type);
+    return BUILTIN_NODE_TYPES.includes(canonicalType);
+}
+/**
+ * Get all built-in type identifiers.
+ *
+ * @returns Array of built-in type strings
+ */
+export function getBuiltinTypes() {
+    return [...BUILTIN_NODE_TYPES];
+}

package/dist/registry/builtinNodes.d.ts

@@ -6,47 +6,10 @@
  * ensuring all built-in node types are available without user action.
  */
 import { type NodeComponentRegistration } from './nodeComponentRegistry.js';
-/**
- * Source identifier for built-in FlowDrop components
- */
-export declare const FLOWDROP_SOURCE = "flowdrop";
+export { FLOWDROP_SOURCE, BUILTIN_TYPE_ALIASES, BUILTIN_NODE_TYPES, resolveBuiltinAlias, isBuiltinType, getBuiltinTypes } from './builtinNodeTypes.js';
+export type { BuiltinNodeType } from './builtinNodeTypes.js';
 /**
  * Built-in FlowDrop node component registrations.
  * These are the default node types that ship with FlowDrop.
  */
 export declare const BUILTIN_NODE_COMPONENTS: NodeComponentRegistration[];
-/**
- * Alias mapping for type resolution.
- * Maps alternative type names to their canonical registration.
- */
-export declare const BUILTIN_TYPE_ALIASES: Record<string, string>;
-/**
- * Get the canonical type for a given type string.
- * Handles aliases like "default" -> "workflowNode".
- *
- * @param type - The type string to resolve
- * @returns The canonical type string
- */
-export declare function resolveBuiltinAlias(type: string): string;
-/**
- * Check if a type is a built-in FlowDrop type.
- *
- * @param type - The type to check
- * @returns true if this is a built-in type
- */
-export declare function isBuiltinType(type: string): boolean;
-/**
- * Get all built-in type identifiers.
- *
- * @returns Array of built-in type strings
- */
-export declare function getBuiltinTypes(): string[];
-/**
- * Type for built-in node types.
- * Use this when you specifically need a built-in type.
- */
-export type BuiltinNodeType = 'workflowNode' | 'simple' | 'square' | 'atom' | 'tool' | 'gateway' | 'note' | 'terminal' | 'idea';
-/**
- * Array of built-in type strings for runtime validation.
- */
-export declare const BUILTIN_NODE_TYPES: BuiltinNodeType[];

package/dist/registry/builtinNodes.js

@@ -6,6 +6,7 @@
  * ensuring all built-in node types are available without user action.
  */
 import {} from './nodeComponentRegistry.js';
+import { FLOWDROP_SOURCE } from './builtinNodeTypes.js';
 import WorkflowNode from '../components/nodes/WorkflowNode.svelte';
 import SimpleNode from '../components/nodes/SimpleNode.svelte';
 import SquareNode from '../components/nodes/SquareNode.svelte';
@@ -15,10 +16,11 @@ import GatewayNode from '../components/nodes/GatewayNode.svelte';
 import NotesNode from '../components/nodes/NotesNode.svelte';
 import TerminalNode from '../components/nodes/TerminalNode.svelte';
 import IdeaNode from '../components/nodes/IdeaNode.svelte';
-/**
- * Source identifier for built-in FlowDrop components
- */
-export const FLOWDROP_SOURCE = 'flowdrop';
+// Pure type metadata + resolution helpers are re-exported for backward
+// compatibility — they now live in a component-free module so that
+// type-only consumers (e.g. utils/nodeTypes.ts, reachable from `core`) do
+// not statically pull in the node components below.
+export { FLOWDROP_SOURCE, BUILTIN_TYPE_ALIASES, BUILTIN_NODE_TYPES, resolveBuiltinAlias, isBuiltinType, getBuiltinTypes } from './builtinNodeTypes.js';
 /**
  * Built-in FlowDrop node component registrations.
  * These are the default node types that ship with FlowDrop.
@@ -124,52 +126,3 @@ export const BUILTIN_NODE_COMPONENTS = [
         statusSize: 'sm'
     }
 ];
-/**
- * Alias mapping for type resolution.
- * Maps alternative type names to their canonical registration.
- */
-export const BUILTIN_TYPE_ALIASES = {
-    default: 'workflowNode'
-};
-/**
- * Get the canonical type for a given type string.
- * Handles aliases like "default" -> "workflowNode".
- *
- * @param type - The type string to resolve
- * @returns The canonical type string
- */
-export function resolveBuiltinAlias(type) {
-    return BUILTIN_TYPE_ALIASES[type] ?? type;
-}
-/**
- * Check if a type is a built-in FlowDrop type.
- *
- * @param type - The type to check
- * @returns true if this is a built-in type
- */
-export function isBuiltinType(type) {
-    const canonicalType = resolveBuiltinAlias(type);
-    return BUILTIN_NODE_COMPONENTS.some((reg) => reg.type === canonicalType);
-}
-/**
- * Get all built-in type identifiers.
- *
- * @returns Array of built-in type strings
- */
-export function getBuiltinTypes() {
-    return BUILTIN_NODE_COMPONENTS.map((reg) => reg.type);
-}
-/**
- * Array of built-in type strings for runtime validation.
- */
-export const BUILTIN_NODE_TYPES = [
-    'workflowNode',
-    'simple',
-    'square',
-    'atom',
-    'tool',
-    'gateway',
-    'note',
-    'terminal',
-    'idea'
-];

package/dist/services/agentSpecExecutionService.d.ts

@@ -102,5 +102,3 @@ export declare class AgentSpecExecutionService {
     private mapSingleNodeStatus;
     private mapToFlowDropStatus;
 }
-/** Singleton instance */
-export declare const agentSpecExecutionService: AgentSpecExecutionService;

package/dist/services/agentSpecExecutionService.js

@@ -332,5 +332,3 @@ export class AgentSpecExecutionService {
         }
     }
 }
-/** Singleton instance */
-export const agentSpecExecutionService = AgentSpecExecutionService.getInstance();

package/dist/services/apiVariableService.js

@@ -5,8 +5,8 @@
  *
  * @module services/apiVariableService
  */
-import { logger } from '../utils/logger.js';
 import { DEFAULT_CACHE_TTL_MS } from '../config/constants.js';
+import { authenticatedFetch } from '../utils/fetchWithAuth.js';
 /**
  * Variable schema cache with TTL support
  * Key format: `variables:{workflowId}:{nodeId}`
@@ -142,25 +142,9 @@ export async function fetchVariableSchema(endpointConfig, workflowId, nodeId, co
     // Prepare request options
     const method = endpoint.method ?? 'GET';
     const timeout = endpoint.timeout ?? 30000;
-    const headers = {
-        Accept: 'application/json',
-        'Content-Type': 'application/json',
-        ...endpoint.headers
-    };
-    // Add auth headers from AuthProvider if available
-    if (authProvider) {
-        try {
-            const authHeaders = await authProvider.getAuthHeaders();
-            Object.assign(headers, authHeaders);
-        }
-        catch (error) {
-            logger.warn('Failed to get auth headers:', error);
-        }
-    }
     // Prepare fetch options
     const fetchOptions = {
         method,
-        headers,
         signal: AbortSignal.timeout(timeout)
     };
     // Add body for non-GET requests
@@ -169,7 +153,16 @@ export async function fetchVariableSchema(endpointConfig, workflowId, nodeId, co
         fetchOptions.body = JSON.stringify(resolvedBody);
     }
     try {
-        const response = await fetch(url, fetchOptions);
+        // authenticatedFetch merges auth headers and transparently refreshes +
+        // retries once on 401 via the provider's onUnauthorized hook.
+        const response = await authenticatedFetch(url, fetchOptions, {
+            authProvider,
+            baseHeaders: {
+                Accept: 'application/json',
+                'Content-Type': 'application/json',
+                ...endpoint.headers
+            }
+        });
         // Handle 404 as "no variables available"
         if (response.status === 404) {
             return {
@@ -179,15 +172,8 @@ export async function fetchVariableSchema(endpointConfig, workflowId, nodeId, co
             };
         }
         if (!response.ok) {
-            // Handle authentication errors
+            // Auth errors remain after the provider's refresh attempt.
             if (response.status === 401 || response.status === 403) {
-                if (authProvider?.onUnauthorized) {
-                    const refreshed = await authProvider.onUnauthorized();
-                    if (refreshed) {
-                        // Retry with refreshed auth
-                        return fetchVariableSchema(endpointConfig, workflowId, nodeId, config, authProvider);
-                    }
-                }
                 return {
                     success: false,
                     error: 'Authentication failed'

package/dist/services/categoriesApi.js

@@ -2,7 +2,8 @@
  * Categories API Service
  * Handles fetching category definitions from the backend
  */
-import { buildEndpointUrl, getEndpointHeaders } from '../config/endpoints.js';
+import { buildEndpointUrl } from '../config/endpoints.js';
+import { authenticatedFetch } from '../utils/fetchWithAuth.js';
 import { DEFAULT_CATEGORIES } from '../config/defaultCategories.js';
 import { logger } from '../utils/logger.js';
 /**
@@ -11,11 +12,7 @@ import { logger } from '../utils/logger.js';
 export async function fetchCategories(endpointConfig, authProvider) {
     try {
         const url = buildEndpointUrl(endpointConfig, endpointConfig.endpoints.categories);
-        const configHeaders = getEndpointHeaders(endpointConfig, 'categories');
-        const authHeaders = authProvider ? await authProvider.getAuthHeaders() : {};
-        const response = await fetch(url, {
-            headers: { ...configHeaders, ...authHeaders }
-        });
+        const response = await authenticatedFetch(url, {}, { config: endpointConfig, endpointKey: 'categories', authProvider });
         if (!response.ok) {
             throw new Error(`HTTP ${response.status}: ${response.statusText}`);
         }