@flowdrop/flowdrop 2.0.0-beta.1 → 2.0.0-beta.3

package/dist/config/endpoints.js

@@ -141,3 +141,31 @@ export function getEndpointHeaders(config, endpointKey) {
     }
     return baseHeaders;
 }
+/**
+ * Build request headers for an endpoint, layering the auth provider's headers
+ * over the static endpoint headers.
+ *
+ * This is the single header-building path shared by the per-instance services
+ * (playground, chat, interrupt, settings, port config, categories). Routing all
+ * of them through this helper guarantees a configured {@link AuthProvider}
+ * authenticates every request consistently — matching the behaviour of
+ * {@link EnhancedFlowDropApiClient}, which owns the equivalent merge for the
+ * typed workflow/node API.
+ *
+ * `getAuthHeaders()` is awaited per call so providers can return freshly
+ * refreshed tokens. When no provider is supplied the result is identical to
+ * {@link getEndpointHeaders} (no auth) — keeping unauthenticated callers
+ * working unchanged.
+ *
+ * @param config - The endpoint configuration
+ * @param endpointKey - Key identifying the endpoint (for static header lookup)
+ * @param authProvider - Optional auth provider supplying `Authorization` etc.
+ * @returns Merged headers: static endpoint headers < auth headers
+ */
+export async function getRequestHeaders(config, endpointKey, authProvider) {
+    const headers = getEndpointHeaders(config, endpointKey);
+    if (authProvider) {
+        Object.assign(headers, await authProvider.getAuthHeaders());
+    }
+    return headers;
+}

package/dist/core/index.d.ts

@@ -68,7 +68,7 @@ export { computeAutoLayout } from '../adapters/agentspec/autoLayout.js';
 export type { AutoLayoutConfig } from '../adapters/agentspec/autoLayout.js';
 export type { AgentSpecEndpointConfig } from '../config/agentSpecEndpoints.js';
 export { defaultAgentSpecEndpoints, createAgentSpecEndpointConfig, buildAgentSpecUrl, getAgentSpecAuthHeaders } from '../config/agentSpecEndpoints.js';
-export { AgentSpecExecutionService, agentSpecExecutionService } from '../services/agentSpecExecutionService.js';
+export { AgentSpecExecutionService } from '../services/agentSpecExecutionService.js';
 export type { AgentSpecExecutionHandle } from '../services/agentSpecExecutionService.js';
 export { workflowSchema, WORKFLOW_SCHEMA_VERSION } from '../schemas/index.js';
 export type { FlowDropTheme, FlowDropThemeName, FlowDropThemeConfig } from '../types/theme.js';
@@ -77,7 +77,6 @@ export type { FlowDropSkin, FlowDropSkinName, FlowDropSkinTokens } from '../type
 export { slateSkin, defaultSkin } from '../skins/index.js';
 export type { ThemePreference, ResolvedTheme } from '../stores/settingsStore.svelte.js';
 export { getTheme as theme, getResolvedTheme as resolvedTheme, setTheme, toggleTheme, cycleTheme, initializeTheme, isThemeInitialized } from '../stores/settingsStore.svelte.js';
-export { sanitizeHtml } from '../utils/sanitize.js';
 export { logger, setLogLevel, getLogLevel } from '../utils/logger.js';
 export type { LogLevel } from '../utils/logger.js';
 export { computeSwapPreview, computeSwapPreviewWithOptions, executeSwap, mapConfig, getVersionUpgrade, compareSemver, performSwap, validateSwapResult, SwapValidationError } from '../utils/nodeSwap.js';

package/dist/core/index.js

@@ -80,8 +80,8 @@ export { validateForAgentSpecExport, validateAgentSpecFlow } from '../adapters/a
 // Agent Spec auto-layout
 export { computeAutoLayout } from '../adapters/agentspec/autoLayout.js';
 export { defaultAgentSpecEndpoints, createAgentSpecEndpointConfig, buildAgentSpecUrl, getAgentSpecAuthHeaders } from '../config/agentSpecEndpoints.js';
-// Agent Spec execution service
-export { AgentSpecExecutionService, agentSpecExecutionService } from '../services/agentSpecExecutionService.js';
+// Agent Spec execution service (instantiate per instance — no global singleton)
+export { AgentSpecExecutionService } from '../services/agentSpecExecutionService.js';
 // ============================================================================
 // Workflow JSON Schema
 // ============================================================================
@@ -90,10 +90,6 @@ export { defaultTheme, minimalTheme, resolveTheme } from '../themes/index.js';
 export { slateSkin, defaultSkin } from '../skins/index.js';
 export { getTheme as theme, getResolvedTheme as resolvedTheme, setTheme, toggleTheme, cycleTheme, initializeTheme, isThemeInitialized } from '../stores/settingsStore.svelte.js';
 // ============================================================================
-// HTML Sanitization
-// ============================================================================
-export { sanitizeHtml } from '../utils/sanitize.js';
-// ============================================================================
 // Logger
 // ============================================================================
 export { logger, setLogLevel, getLogLevel } from '../utils/logger.js';

package/dist/display/index.d.ts

@@ -5,9 +5,13 @@
  *
  * @module display
  *
+ * This entry renders user/API-provided HTML, so it pulls in the HTML sanitizer
+ * (DOMPurify). `sanitizeHtml` is exposed here — rather than from
+ * `@flowdrop/flowdrop/core` — to keep `core` free of that heavier dependency.
+ *
  * @example
  * ```typescript
- * import { MarkdownDisplay } from "@flowdrop/flowdrop/display";
+ * import { MarkdownDisplay, sanitizeHtml } from "@flowdrop/flowdrop/display";
  * ```
  *
  * @example In Svelte:
@@ -25,3 +29,4 @@
  * ```
  */
 export { default as MarkdownDisplay } from '../components/MarkdownDisplay.svelte';
+export { sanitizeHtml } from '../utils/sanitize.js';

package/dist/display/index.js

@@ -5,9 +5,13 @@
  *
  * @module display
  *
+ * This entry renders user/API-provided HTML, so it pulls in the HTML sanitizer
+ * (DOMPurify). `sanitizeHtml` is exposed here — rather than from
+ * `@flowdrop/flowdrop/core` — to keep `core` free of that heavier dependency.
+ *
  * @example
  * ```typescript
- * import { MarkdownDisplay } from "@flowdrop/flowdrop/display";
+ * import { MarkdownDisplay, sanitizeHtml } from "@flowdrop/flowdrop/display";
  * ```
  *
  * @example In Svelte:
@@ -28,3 +32,7 @@
 // Display Components
 // ============================================================================
 export { default as MarkdownDisplay } from '../components/MarkdownDisplay.svelte';
+// ============================================================================
+// HTML Sanitization (DOMPurify-backed — lives here, not in core)
+// ============================================================================
+export { sanitizeHtml } from '../utils/sanitize.js';

package/dist/editor/index.d.ts

@@ -74,7 +74,7 @@ export { PortCoordinateStore } from '../stores/portCoordinateStore.svelte.js';
 export { HistoryService } from '../services/historyService.js';
 export type { HistoryEntry, HistoryState, PushOptions } from '../stores/historyStore.svelte.js';
 export { showSuccess, showError, showWarning, showInfo, showLoading, dismissToast, dismissAllToasts, showPromise, showConfirmation, apiToasts, workflowToasts, pipelineToasts } from '../services/toastService.js';
-export { NodeExecutionService, nodeExecutionService } from '../services/nodeExecutionService.js';
+export { NodeExecutionService } from '../services/nodeExecutionService.js';
 export { saveWorkflow, updateWorkflow, getWorkflow, getWorkflows, deleteWorkflow, getWorkflowCount, initializeSampleWorkflows } from '../services/workflowStorage.js';
 export { globalSaveWorkflow, globalExportWorkflow } from '../services/globalSave.js';
 export { fetchPortConfig, validatePortConfig } from '../services/portConfigApi.js';

package/dist/editor/index.js

@@ -109,7 +109,7 @@ export { HistoryService } from '../services/historyService.js';
 // Services
 // ============================================================================
 export { showSuccess, showError, showWarning, showInfo, showLoading, dismissToast, dismissAllToasts, showPromise, showConfirmation, apiToasts, workflowToasts, pipelineToasts } from '../services/toastService.js';
-export { NodeExecutionService, nodeExecutionService } from '../services/nodeExecutionService.js';
+export { NodeExecutionService } from '../services/nodeExecutionService.js';
 export { saveWorkflow, updateWorkflow, getWorkflow, getWorkflows, deleteWorkflow, getWorkflowCount, initializeSampleWorkflows } from '../services/workflowStorage.js';
 export { globalSaveWorkflow, globalExportWorkflow } from '../services/globalSave.js';
 export { fetchPortConfig, validatePortConfig } from '../services/portConfigApi.js';

package/dist/form/full.d.ts

@@ -20,7 +20,8 @@
  * // Now all field types are available
  * ```
  */
-export { SchemaForm, FormField, FormFieldFull, FormFieldWrapper, FormTextField, FormTextarea, FormNumberField, FormRangeField, FormToggle, FormSelect, FormCheckboxGroup, FormArray, FormFieldset, FormUISchemaRenderer } from './index.js';
+export { default as FormFieldFull } from '../components/form/FormField.svelte';
+export { SchemaForm, FormField, FormFieldWrapper, FormTextField, FormTextarea, FormNumberField, FormRangeField, FormToggle, FormSelect, FormCheckboxGroup, FormArray, FormFieldset, FormUISchemaRenderer } from './index.js';
 export type { FieldSchema, FieldType, FieldFormat, FieldOption, OneOfItem, SchemaFormProps, BaseFieldProps, TextFieldProps, TextareaFieldProps, NumberFieldProps, ToggleFieldProps, RangeFieldProps, SelectFieldProps, CheckboxGroupFieldProps, ArrayFieldProps, FormFieldFactoryProps, FormFieldWrapperProps, FieldComponentProps, FieldMatcher, FieldMatcherRegistration, FieldComponent, FieldComponentRegistration } from './index.js';
 export { isFieldOptionArray, isOneOfArray, normalizeOptions, oneOfToOptions, getSchemaOptions } from './index.js';
 export { FieldComponentRegistry, hiddenFieldMatcher, checkboxGroupMatcher, enumSelectMatcher, textareaMatcher, rangeMatcher, textFieldMatcher, numberFieldMatcher, toggleMatcher, selectOptionsMatcher, arrayMatcher } from './index.js';

package/dist/form/full.js

@@ -21,8 +21,11 @@
  * ```
  */
 // Re-export everything from the light form module
+// The "everything statically bundled" FormField variant lives here (this is the
+// heavy entry), not in the light `@flowdrop/flowdrop/form`.
+export { default as FormFieldFull } from '../components/form/FormField.svelte';
 // Components
-export { SchemaForm, FormField, FormFieldFull, FormFieldWrapper, FormTextField, FormTextarea, FormNumberField, FormRangeField, FormToggle, FormSelect, FormCheckboxGroup, FormArray, FormFieldset, FormUISchemaRenderer } from './index.js';
+export { SchemaForm, FormField, FormFieldWrapper, FormTextField, FormTextarea, FormNumberField, FormRangeField, FormToggle, FormSelect, FormCheckboxGroup, FormArray, FormFieldset, FormUISchemaRenderer } from './index.js';
 // Utility functions
 export { isFieldOptionArray, isOneOfArray, normalizeOptions, oneOfToOptions, getSchemaOptions } from './index.js';
 // Field Registry

package/dist/form/index.d.ts

@@ -59,7 +59,6 @@
  */
 export { default as SchemaForm } from '../components/SchemaForm.svelte';
 export { default as FormField } from '../components/form/FormFieldLight.svelte';
-export { default as FormFieldFull } from '../components/form/FormField.svelte';
 export { default as FormFieldWrapper } from '../components/form/FormFieldWrapper.svelte';
 export { default as FormTextField } from '../components/form/FormTextField.svelte';
 export { default as FormTextarea } from '../components/form/FormTextarea.svelte';

package/dist/form/index.js

@@ -66,8 +66,9 @@ export { default as SchemaForm } from '../components/SchemaForm.svelte';
 // ============================================================================
 // Use the light version of FormField that uses the registry for heavy editors
 export { default as FormField } from '../components/form/FormFieldLight.svelte';
-// Also export the original (full) version for users who want everything
-export { default as FormFieldFull } from '../components/form/FormField.svelte';
+// NOTE: `FormFieldFull` — the variant that *statically* bundles every editor
+// (including CodeMirror) — is intentionally NOT exported here; it would pull
+// CodeMirror into this light entry. Import it from `@flowdrop/flowdrop/form/full`.
 export { default as FormFieldWrapper } from '../components/form/FormFieldWrapper.svelte';
 export { default as FormTextField } from '../components/form/FormTextField.svelte';
 export { default as FormTextarea } from '../components/form/FormTextarea.svelte';

package/dist/helpers/workflowEditorHelper.d.ts

@@ -5,6 +5,7 @@
 import type { WorkflowNode as WorkflowNodeType, NodeMetadata, Workflow, WorkflowEdge, NodeExecutionInfo } from '../types/index.js';
 import { type FlowDropInstance } from '../stores/instanceContainer.svelte.js';
 import type { ApiContext } from '../stores/apiContext.js';
+import type { AuthProvider } from '../types/auth.js';
 import type { EndpointConfig } from '../config/endpoints.js';
 export { generateNodeId, extractConfigDefaults } from '../utils/nodeIds.js';
 /**
@@ -134,7 +135,8 @@ export declare class WorkflowOperationsHelper {
  */
 export declare class ConfigurationHelper {
     /**
-     * Configure API endpoints on the given instance's API context.
+     * Configure API endpoints (and optionally the auth provider) on the given
+     * instance's API context.
      */
-    static configureEndpoints(api: ApiContext, config: EndpointConfig): void;
+    static configureEndpoints(api: ApiContext, config: EndpointConfig, authProvider?: AuthProvider): void;
 }

package/dist/helpers/workflowEditorHelper.js

@@ -382,9 +382,10 @@ export class WorkflowOperationsHelper {
  */
 export class ConfigurationHelper {
     /**
-     * Configure API endpoints on the given instance's API context.
+     * Configure API endpoints (and optionally the auth provider) on the given
+     * instance's API context.
      */
-    static configureEndpoints(api, config) {
-        api.configure(config);
+    static configureEndpoints(api, config, authProvider) {
+        api.configure(config, authProvider);
     }
 }

package/dist/playground/index.d.ts

@@ -126,8 +126,8 @@ export { default as InputCollector } from '../components/playground/InputCollect
 export { default as ExecutionLogs } from '../components/playground/ExecutionLogs.svelte';
 export { default as MessageBubble } from '../components/playground/MessageBubble.svelte';
 export { InterruptBubble, ConfirmationPrompt, ChoicePrompt, TextInputPrompt, FormPrompt, ReviewPrompt } from '../components/interrupt/index.js';
-export { PlaygroundService, playgroundService } from '../services/playgroundService.js';
-export { InterruptService, interruptService } from '../services/interruptService.js';
+export { PlaygroundService } from '../services/playgroundService.js';
+export { InterruptService } from '../services/interruptService.js';
 export { PlaygroundStore } from '../stores/playgroundStore.svelte.js';
 export type { PlaygroundSession, PlaygroundMessage, PlaygroundInputField, PlaygroundMessageRequest, PlaygroundMessagesResult, PlaygroundConfig, PlaygroundMode, PlaygroundSessionStatus, PlaygroundMessageRole, PlaygroundMessageLevel, PlaygroundMessageMetadata, PlaygroundApiResponse, PlaygroundSessionsResponse, PlaygroundSessionResponse, PlaygroundMessageResponse, PlaygroundMessagesApiResponse, PlaygroundExecution } from '../types/playground.js';
 export { isChatInputNode, CHAT_INPUT_PATTERNS, defaultShouldStopPolling, defaultIsTerminalStatus, DEFAULT_STOP_POLLING_STATUSES, DEFAULT_TERMINAL_STATUSES } from '../types/playground.js';

package/dist/playground/index.js

@@ -135,11 +135,11 @@ export { InterruptBubble, ConfirmationPrompt, ChoicePrompt, TextInputPrompt, For
 // ============================================================================
 // Playground Service
 // ============================================================================
-export { PlaygroundService, playgroundService } from '../services/playgroundService.js';
+export { PlaygroundService } from '../services/playgroundService.js';
 // ============================================================================
 // Interrupt Service (Human-in-the-Loop)
 // ============================================================================
-export { InterruptService, interruptService } from '../services/interruptService.js';
+export { InterruptService } from '../services/interruptService.js';
 // ============================================================================
 // Playground Store
 // ============================================================================

package/dist/playground/mount.d.ts

@@ -45,6 +45,7 @@
  */
 import type { Workflow } from '../types/index.js';
 import type { EndpointConfig } from '../config/endpoints.js';
+import type { AuthProvider } from '../types/auth.js';
 import type { PlaygroundMode, PlaygroundConfig, PlaygroundSession, PlaygroundMessagesApiResponse, PlaygroundSessionStatus } from '../types/playground.js';
 import type { PartialSettings, SettingsCategory } from '../types/settings.js';
 import type { NavbarAction } from '../types/navbar.js';
@@ -81,6 +82,15 @@ export interface PlaygroundMountOptions {
      * Use createEndpointConfig() to create this
      */
     endpointConfig?: EndpointConfig;
+    /**
+     * Authentication provider for API requests.
+     *
+     * Applied to this instance via `fd.api.configure()` so every request the
+     * playground makes (sessions, messages, polling, interrupts) carries the
+     * provider's headers — e.g. an `Authorization` bearer token or an
+     * `X-CSRF-Token`. Omit for unauthenticated backends.
+     */
+    authProvider?: AuthProvider;
     /**
      * Playground-specific configuration options
      */
@@ -242,7 +252,7 @@ export interface PlaygroundAppMountOptions extends Omit<PlaygroundStudioMountOpt
      * @default "standalone"
      */
     mode?: 'standalone' | 'embedded';
-    /** Render the FlowDrop Navbar above the playground (default: true). */
+    /** Render the FlowDrop Navbar above the playground (default: false). */
     showNavbar?: boolean;
     /** Title shown in the navbar. Falls back to the workflow name, then "Playground". */
     navbarTitle?: string;
@@ -258,17 +268,21 @@ export interface PlaygroundAppMountOptions extends Omit<PlaygroundStudioMountOpt
     showSettingsResetButton?: boolean;
 }
 /**
- * Mount the full-page PlaygroundApp (Navbar + PlaygroundStudio) into a container.
+ * Mount the full-page PlaygroundApp (PlaygroundStudio, optionally wrapped in the
+ * FlowDrop Navbar) into a container.
  *
- * Use this when you want the same chrome as the FlowDrop editor — logo,
- * branding, and settings modal — wrapped around the playground. For an
- * embeddable split-pane without the navbar, use mountPlaygroundStudio().
+ * The navbar is opt-in (`showNavbar: true`) — matching the editor mount, so
+ * embedding into a page that already has its own header never double-stacks a
+ * header. Pass `showNavbar: true` when FlowDrop owns the whole page and you want
+ * its chrome (logo, branding, settings modal). For a leaner embeddable
+ * split-pane, mountPlaygroundStudio() omits the navbar wrapper entirely.
  *
  * @example
  * ```typescript
  * const app = await mountPlaygroundApp(container, {
  *   workflowId: 'wf-123',
  *   endpointConfig: createEndpointConfig('/api/flowdrop'),
+ *   showNavbar: true,
  *   navbarTitle: 'My Workflow',
  *   primaryActions: [
  *     { label: 'Edit', href: '/workflows/wf-123/edit', icon: 'mdi:pencil-outline', variant: 'secondary' },

package/dist/playground/mount.js

@@ -125,7 +125,7 @@ function buildMountedPlayground(svelteApp, workflowId, config, fd, ownsInstance,
         startPolling: () => {
             const session = fd.playground.currentSession;
             if (session) {
-                playgroundService.startPolling(fd.api.config, session.id, (response) => fd.playground.applyServerResponse(response, session.id), pollingInterval, config.shouldStopPolling, playgroundService.getLastSequenceNumber());
+                playgroundService.startPolling(fd.api.config, session.id, (response) => fd.playground.applyServerResponse(response, session.id), pollingInterval, config.shouldStopPolling, playgroundService.getLastSequenceNumber(), fd.api.authProvider);
             }
         },
         pushMessages: (response) => fd.playground.applyServerResponse(response, null),
@@ -165,7 +165,7 @@ function buildMountedPlayground(svelteApp, workflowId, config, fd, ownsInstance,
  * ```
  */
 export async function mountPlayground(container, options) {
-    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, config = {}, height, width, settings: initialSettings, onClose, onSessionStatusChange, instanceId } = options;
+    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, authProvider, config = {}, height, width, settings: initialSettings, onClose, onSessionStatusChange, instanceId } = options;
     // Validate required parameters
     if (!workflowId) {
         throw new Error('workflowId is required for mountPlayground()');
@@ -200,6 +200,7 @@ export async function mountPlayground(container, options) {
                 workflow,
                 initialSessionId,
                 endpointConfig: finalEndpointConfig,
+                authProvider,
                 config,
                 onClose: () => {
                     if (onClose) {
@@ -219,6 +220,7 @@ export async function mountPlayground(container, options) {
                 mode,
                 initialSessionId,
                 endpointConfig: finalEndpointConfig,
+                authProvider,
                 config,
                 onClose
             }
@@ -247,7 +249,7 @@ export function unmountPlayground(app) {
     }
 }
 export async function mountPlaygroundStudio(container, options) {
-    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, config = {}, height, width, initialPipelineOpen, minChatWidth, initialPipelineWidth, settings: initialSettings, onClose, onSessionNavigate, onSessionStatusChange, pipelineViews, instanceId } = options;
+    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, authProvider, config = {}, height, width, initialPipelineOpen, minChatWidth, initialPipelineWidth, settings: initialSettings, onClose, onSessionNavigate, onSessionStatusChange, pipelineViews, instanceId } = options;
     if (!workflowId) {
         throw new Error('workflowId is required for mountPlaygroundStudio()');
     }
@@ -272,6 +274,7 @@ export async function mountPlaygroundStudio(container, options) {
             mode,
             initialSessionId,
             endpointConfig: finalEndpointConfig,
+            authProvider,
             config,
             onClose,
             onSessionNavigate,
@@ -284,17 +287,21 @@ export async function mountPlaygroundStudio(container, options) {
     return buildMountedPlayground(svelteApp, workflowId, config, fd, ownsInstance, onSessionStatusChange);
 }
 /**
- * Mount the full-page PlaygroundApp (Navbar + PlaygroundStudio) into a container.
+ * Mount the full-page PlaygroundApp (PlaygroundStudio, optionally wrapped in the
+ * FlowDrop Navbar) into a container.
  *
- * Use this when you want the same chrome as the FlowDrop editor — logo,
- * branding, and settings modal — wrapped around the playground. For an
- * embeddable split-pane without the navbar, use mountPlaygroundStudio().
+ * The navbar is opt-in (`showNavbar: true`) — matching the editor mount, so
+ * embedding into a page that already has its own header never double-stacks a
+ * header. Pass `showNavbar: true` when FlowDrop owns the whole page and you want
+ * its chrome (logo, branding, settings modal). For a leaner embeddable
+ * split-pane, mountPlaygroundStudio() omits the navbar wrapper entirely.
  *
  * @example
  * ```typescript
  * const app = await mountPlaygroundApp(container, {
  *   workflowId: 'wf-123',
  *   endpointConfig: createEndpointConfig('/api/flowdrop'),
+ *   showNavbar: true,
  *   navbarTitle: 'My Workflow',
  *   primaryActions: [
  *     { label: 'Edit', href: '/workflows/wf-123/edit', icon: 'mdi:pencil-outline', variant: 'secondary' },
@@ -304,7 +311,7 @@ export async function mountPlaygroundStudio(container, options) {
  * ```
  */
 export async function mountPlaygroundApp(container, options) {
-    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, config = {}, height, width, showNavbar = true, navbarTitle, primaryActions, showSettings = true, settingsCategories, showSettingsSyncButton, showSettingsResetButton, initialPipelineOpen, minChatWidth, initialPipelineWidth, settings: initialSettings, onClose, onSessionNavigate, onSessionStatusChange, instanceId } = options;
+    const { workflowId, workflow, mode = 'standalone', initialSessionId, endpointConfig, authProvider, config = {}, height, width, showNavbar = false, navbarTitle, primaryActions, showSettings = true, settingsCategories, showSettingsSyncButton, showSettingsResetButton, initialPipelineOpen, minChatWidth, initialPipelineWidth, settings: initialSettings, onClose, onSessionNavigate, onSessionStatusChange, instanceId } = options;
     if (!workflowId) {
         throw new Error('workflowId is required for mountPlaygroundApp()');
     }
@@ -332,6 +339,7 @@ export async function mountPlaygroundApp(container, options) {
             mode,
             initialSessionId,
             endpointConfig: finalEndpointConfig,
+            authProvider,
             config,
             showNavbar,
             navbarTitle,

package/dist/registry/builtinNodeTypes.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Built-in Node Type Metadata (pure — no component imports)
+ *
+ * The type identifiers, aliases, and resolution helpers for FlowDrop's built-in
+ * node types, with ZERO dependency on the Svelte node components. Utilities that
+ * only need to reason about type strings (e.g. `utils/nodeTypes.ts`, reachable
+ * from `@flowdrop/flowdrop/core`) import from here, so the lightweight `core`
+ * entry never statically pulls in node components, marked, or DOMPurify.
+ *
+ * The component registrations themselves live in `./builtinNodes.ts`, which
+ * re-exports everything here for backward compatibility.
+ *
+ * @module registry/builtinNodeTypes
+ */
+/**
+ * Source identifier for built-in FlowDrop components.
+ */
+export declare const FLOWDROP_SOURCE = "flowdrop";
+/**
+ * Type for built-in node types.
+ * Use this when you specifically need a built-in type.
+ */
+export type BuiltinNodeType = 'workflowNode' | 'simple' | 'square' | 'atom' | 'tool' | 'gateway' | 'note' | 'terminal' | 'idea';
+/**
+ * Array of built-in type strings for runtime validation.
+ */
+export declare const BUILTIN_NODE_TYPES: BuiltinNodeType[];
+/**
+ * Alias mapping for type resolution.
+ * Maps alternative type names to their canonical registration.
+ */
+export declare const BUILTIN_TYPE_ALIASES: Record<string, string>;
+/**
+ * Get the canonical type for a given type string.
+ * Handles aliases like "default" -> "workflowNode".
+ *
+ * @param type - The type string to resolve
+ * @returns The canonical type string
+ */
+export declare function resolveBuiltinAlias(type: string): string;
+/**
+ * Check if a type is a built-in FlowDrop type.
+ *
+ * @param type - The type to check
+ * @returns true if this is a built-in type
+ */
+export declare function isBuiltinType(type: string): boolean;
+/**
+ * Get all built-in type identifiers.
+ *
+ * @returns Array of built-in type strings
+ */
+export declare function getBuiltinTypes(): string[];

package/dist/registry/builtinNodeTypes.js

@@ -0,0 +1,67 @@
+/**
+ * Built-in Node Type Metadata (pure — no component imports)
+ *
+ * The type identifiers, aliases, and resolution helpers for FlowDrop's built-in
+ * node types, with ZERO dependency on the Svelte node components. Utilities that
+ * only need to reason about type strings (e.g. `utils/nodeTypes.ts`, reachable
+ * from `@flowdrop/flowdrop/core`) import from here, so the lightweight `core`
+ * entry never statically pulls in node components, marked, or DOMPurify.
+ *
+ * The component registrations themselves live in `./builtinNodes.ts`, which
+ * re-exports everything here for backward compatibility.
+ *
+ * @module registry/builtinNodeTypes
+ */
+/**
+ * Source identifier for built-in FlowDrop components.
+ */
+export const FLOWDROP_SOURCE = 'flowdrop';
+/**
+ * Array of built-in type strings for runtime validation.
+ */
+export const BUILTIN_NODE_TYPES = [
+    'workflowNode',
+    'simple',
+    'square',
+    'atom',
+    'tool',
+    'gateway',
+    'note',
+    'terminal',
+    'idea'
+];
+/**
+ * Alias mapping for type resolution.
+ * Maps alternative type names to their canonical registration.
+ */
+export const BUILTIN_TYPE_ALIASES = {
+    default: 'workflowNode'
+};
+/**
+ * Get the canonical type for a given type string.
+ * Handles aliases like "default" -> "workflowNode".
+ *
+ * @param type - The type string to resolve
+ * @returns The canonical type string
+ */
+export function resolveBuiltinAlias(type) {
+    return BUILTIN_TYPE_ALIASES[type] ?? type;
+}
+/**
+ * Check if a type is a built-in FlowDrop type.
+ *
+ * @param type - The type to check
+ * @returns true if this is a built-in type
+ */
+export function isBuiltinType(type) {
+    const canonicalType = resolveBuiltinAlias(type);
+    return BUILTIN_NODE_TYPES.includes(canonicalType);
+}
+/**
+ * Get all built-in type identifiers.
+ *
+ * @returns Array of built-in type strings
+ */
+export function getBuiltinTypes() {
+    return [...BUILTIN_NODE_TYPES];
+}

package/dist/registry/builtinNodes.d.ts

@@ -6,47 +6,10 @@
  * ensuring all built-in node types are available without user action.
  */
 import { type NodeComponentRegistration } from './nodeComponentRegistry.js';
-/**
- * Source identifier for built-in FlowDrop components
- */
-export declare const FLOWDROP_SOURCE = "flowdrop";
+export { FLOWDROP_SOURCE, BUILTIN_TYPE_ALIASES, BUILTIN_NODE_TYPES, resolveBuiltinAlias, isBuiltinType, getBuiltinTypes } from './builtinNodeTypes.js';
+export type { BuiltinNodeType } from './builtinNodeTypes.js';
 /**
  * Built-in FlowDrop node component registrations.
  * These are the default node types that ship with FlowDrop.
  */
 export declare const BUILTIN_NODE_COMPONENTS: NodeComponentRegistration[];
-/**
- * Alias mapping for type resolution.
- * Maps alternative type names to their canonical registration.
- */
-export declare const BUILTIN_TYPE_ALIASES: Record<string, string>;
-/**
- * Get the canonical type for a given type string.
- * Handles aliases like "default" -> "workflowNode".
- *
- * @param type - The type string to resolve
- * @returns The canonical type string
- */
-export declare function resolveBuiltinAlias(type: string): string;
-/**
- * Check if a type is a built-in FlowDrop type.
- *
- * @param type - The type to check
- * @returns true if this is a built-in type
- */
-export declare function isBuiltinType(type: string): boolean;
-/**
- * Get all built-in type identifiers.
- *
- * @returns Array of built-in type strings
- */
-export declare function getBuiltinTypes(): string[];
-/**
- * Type for built-in node types.
- * Use this when you specifically need a built-in type.
- */
-export type BuiltinNodeType = 'workflowNode' | 'simple' | 'square' | 'atom' | 'tool' | 'gateway' | 'note' | 'terminal' | 'idea';
-/**
- * Array of built-in type strings for runtime validation.
- */
-export declare const BUILTIN_NODE_TYPES: BuiltinNodeType[];