@statelyai/sdk 0.11.0 → 0.12.1

package/dist/index.d.mts

@@ -1,13 +1,14 @@
 import { StatelyApiClientOptions, StatelyApiError, StatelyApiUrlOptions, createStatelyApiClient, createStatelyApiUrl } from "./api.mjs";
-import { CommentsConfig, EmbedEventHandler, EmbedEventMap, EmbedEventName, EmbedMode, ExportCallOptions, ExportFormat, ExportFormatMap, InitOptions, ProjectEmbedMachine, UploadResult } from "./protocol.mjs";
+import { CapabilityDeniedCapability, CapabilityDeniedEvent, CommentsConfig, EditorCapabilities, EmbedEventHandler, EmbedEventMap, EmbedEventName, EmbedMode, ExportCallOptions, ExportFormat, ExportFormatMap, InitOptions, ProjectEmbedMachine, UploadResult } from "./protocol.mjs";
 import { AssetUploadAdapter, AssetUploadContext, AssetUploadRequest, CreateS3AssetUploadAdapterOptions, CreateSupabaseAssetUploadAdapterOptions, S3UploadTarget, SupabaseStorageClient, createS3AssetUploadAdapter, createSupabaseAssetUploadAdapter } from "./assetStorage.mjs";
+import { i as getCredentialToken, n as StatelyCredential, r as createAuthorizationHeader, t as StatelyAuthMode } from "./auth-DO1-eQcU.mjs";
 import { AssetConfig, StatelyEmbed, StatelyEmbedOptions, createStatelyEmbed } from "./embed.mjs";
-import { C as EventTypeData, E as JSONSchema7, S as DigraphNodeConfig, T as CodeGenGraph, _ as studioMachineConverter, a as StatelyGraphData, b as DigraphConfig, c as StatelyInvoke, d as StudioAction, f as StudioEdge, g as fromStudioMachine, h as StudioNode, i as StatelyGraph, l as StatelyNodeData, m as StudioMachine, o as StatelyGuard, r as StatelyEdgeData, t as StatelyAction, v as toStudioMachine, w as StateNodeJSONData, x as DigraphEdgeConfig, y as DigraphAction } from "./graph-GeuH-mFK.mjs";
-import { a as ManualActorOptions, c as createPostMessageTransport, i as InspectorEvents, l as createWebSocketTransport, n as CreateInspectorOptions, o as createStatelyInspector, r as Inspector, s as Transport, t as AdoptedActor } from "./inspect-CZ8iLJR7.mjs";
+import { _ as serializeJS, c as MachineConfigOptions, d as contextSchemaToTSType, f as eventsSchemaToTSType, g as raw, h as jsonSchemaToTSType, i as CodeGenGraph, l as RawCode, m as graphToXStateTS, o as GraphPatch, p as graphToMachineConfig, t as ActionLocation, u as XStateTSOptions } from "./index-BpUKBSiq.mjs";
+import { C as EventTypeData, S as DigraphNodeConfig, _ as studioMachineConverter, a as StatelyGraphData, b as DigraphConfig, c as StatelyInvoke, d as StudioAction, f as StudioEdge, g as fromStudioMachine, h as StudioNode, i as StatelyGraph, l as StatelyNodeData, m as StudioMachine, o as StatelyGuard, r as StatelyEdgeData, t as StatelyAction, v as toStudioMachine, w as StateNodeJSONData, x as DigraphEdgeConfig, y as DigraphAction } from "./graph-Bm4_GZX_.mjs";
+import { a as ManualActorOptions, c as createPostMessageTransport, i as InspectorEvents, l as createWebSocketTransport, n as CreateInspectorOptions, o as createStatelyInspector, r as Inspector, s as Transport, t as AdoptedActor } from "./inspect-BmZUcnZB.mjs";
 import { ConnectedRepo, CreateMachineFromDefinitionInput, CreateMachineFromTemplateInput, CreateMachineInput, CreateMachineTemplate, CreateProjectInput, EnsureProjectInput, ExtractMachinesResponse, ExtractedMachine, GetMachineOptions, ProjectData, ProjectMachine, ProjectVisibility, RepoType, StudioApiError, StudioClient, StudioClientOptions, StudioMachineRecord, UpdateMachineInput, VerifyApiKeyResponse, XStateVersion, createStatelyClient } from "./studio.mjs";
+import { OAuthAuthorizationServerMetadata, OAuthClientRegistrationResponse, OAuthProtectedResourceMetadata, OAuthTokenResponse, PkcePair, buildAuthorizeUrl, createPkcePair, discoverAuthorizationServer, discoverProtectedResource, exchangeCodeForToken, refreshToken, registerOAuthClient } from "./oauth.mjs";
 import { PlanSyncOptions, PullSyncResult, PushLocalMachineLinksResult, PushSyncOptions, PushSyncProjectOptions, PushSyncResult, ResolvedSyncInput, SyncInputFormat, SyncPlan, SyncPlanSummary } from "./sync.mjs";
-import { ActionLocation, GraphPatch } from "./patchTypes.mjs";
-import { UnknownMachineConfig } from "xstate";
 
 //#region src/statelyPragma.d.ts
 interface StatelyPragma {
@@ -31,56 +32,4 @@ declare function findStatelyPragmaAttachments(sourceText: string, fileName?: str
 declare function getStatelyPragma(sourceText: string, fileName?: string, machineIndex?: number): StatelyPragma | undefined;
 declare function upsertStatelyPragma(sourceText: string, id: string, options?: UpsertStatelyPragmaOptions): string;
 //#endregion
-//#region ../graph-tools/src/graphToMachineConfig.d.ts
-interface MachineConfigOptions {
-  showDescriptions?: boolean;
-  showMeta?: boolean;
-  /**
-   * Emit inline-code guards as a `{ type }` reference instead of an inline code
-   * expression directive. The simulation needs this: it can't evaluate guard
-   * source, so it stubs each guard by `type` (see getSimImplementations). A
-   * code-expression guard has no `type`, so XState reads `undefined` and throws
-   * "Guard 'undefined' is not implemented" the moment that transition is taken.
-   */
-  inlineGuardsAsTypeRef?: boolean;
-}
-declare function graphToMachineConfig(graph: CodeGenGraph, options?: MachineConfigOptions): UnknownMachineConfig;
-//#endregion
-//#region src/graphToXStateTS.d.ts
-interface XStateTSOptions extends MachineConfigOptions {
-  exportStyle?: 'named' | 'default' | 'none';
-  targetLanguage?: 'typescript' | 'javascript';
-  xstateVersion?: 5 | 6;
-}
-declare function graphToXStateTS(graph: CodeGenGraph, options?: XStateTSOptions): string;
-//#endregion
-//#region ../graph-tools/src/serializeJS.d.ts
-/**
- * Serializes JavaScript values as JS source code (not JSON).
- * - Unquoted keys for valid identifiers
- * - Single-quoted strings
- * - Omits undefined values
- * - Supports RawCode for verbatim expressions
- * - Supports inline expression directives for verbatim expressions
- */
-declare class RawCode {
-  code: string;
-  constructor(code: string);
-}
-declare function raw(code: string): RawCode;
-declare function serializeJS(value: unknown, indent?: number, step?: number): string;
-//#endregion
-//#region src/jsonSchemaToTSType.d.ts
-declare function jsonSchemaToTSType(schema: JSONSchema7 | undefined | null): string;
-/**
- * Build an inline context type string from the schemas.context record.
- * Each key is a context property name, value is its JSONSchema7.
- */
-declare function contextSchemaToTSType(context: Record<string, JSONSchema7> | null | undefined): string | null;
-/**
- * Build an event union type from the schemas.events record.
- * Each key is the event type name, value describes the payload properties.
- */
-declare function eventsSchemaToTSType(events: Record<string, JSONSchema7> | null | undefined): string | null;
-//#endregion
-export { type ActionLocation, type AdoptedActor, type AssetConfig, type AssetUploadAdapter, type AssetUploadContext, type AssetUploadRequest, type CodeGenGraph, type CommentsConfig, type ConnectedRepo, type CreateInspectorOptions, type CreateMachineFromDefinitionInput, type CreateMachineFromTemplateInput, type CreateMachineInput, type CreateMachineTemplate, type CreateProjectInput, type CreateS3AssetUploadAdapterOptions, type CreateSupabaseAssetUploadAdapterOptions, type DigraphAction, type DigraphConfig, type DigraphEdgeConfig, type DigraphNodeConfig, type EmbedEventHandler, type EmbedEventMap, type EmbedEventName, type EmbedMode, type EnsureProjectInput, type EventTypeData, type ExportCallOptions, type ExportFormat, type ExportFormatMap, type ExtractMachinesResponse, type ExtractedMachine, type GetMachineOptions, type GraphPatch, type InitOptions, type Inspector, type InspectorEvents, type MachineConfigOptions, type ManualActorOptions, type PlanSyncOptions, type ProjectData, type ProjectEmbedMachine, type ProjectMachine, type ProjectVisibility, type PullSyncResult, type PushLocalMachineLinksResult, type PushSyncOptions, type PushSyncProjectOptions, type PushSyncResult, RawCode, type RepoType, type ResolvedSyncInput, type S3UploadTarget, type StateNodeJSONData, type StatelyAction, type StatelyApiClientOptions, StatelyApiError, type StatelyApiUrlOptions, type StatelyEdgeData, type StatelyEmbed, type StatelyEmbedOptions, type StatelyGraph, type StatelyGraphData, type StatelyGuard, type StatelyInvoke, type StatelyNodeData, type StatelyPragma, type StatelyPragmaAttachment, type StudioAction, StudioApiError, type StudioClient, type StudioClientOptions, type StudioEdge, type StudioMachine, type StudioMachineRecord, type StudioNode, type SupabaseStorageClient, type SyncInputFormat, type SyncPlan, type SyncPlanSummary, type Transport, type UpdateMachineInput, type UploadResult, type UpsertStatelyPragmaOptions, type VerifyApiKeyResponse, type XStateTSOptions, type XStateVersion, contextSchemaToTSType, createPostMessageTransport, createS3AssetUploadAdapter, createStatelyApiClient, createStatelyApiUrl, createStatelyClient, createStatelyEmbed, createStatelyInspector, createSupabaseAssetUploadAdapter, createWebSocketTransport, eventsSchemaToTSType, findStatelyPragmaAttachments, fromStudioMachine, getStatelyPragma, graphToMachineConfig, graphToXStateTS, jsonSchemaToTSType, raw, serializeJS, studioMachineConverter, toStudioMachine, upsertStatelyPragma };
+export { type ActionLocation, type AdoptedActor, type AssetConfig, type AssetUploadAdapter, type AssetUploadContext, type AssetUploadRequest, type CapabilityDeniedCapability, type CapabilityDeniedEvent, type CodeGenGraph, type CommentsConfig, type ConnectedRepo, type CreateInspectorOptions, type CreateMachineFromDefinitionInput, type CreateMachineFromTemplateInput, type CreateMachineInput, type CreateMachineTemplate, type CreateProjectInput, type CreateS3AssetUploadAdapterOptions, type CreateSupabaseAssetUploadAdapterOptions, type DigraphAction, type DigraphConfig, type DigraphEdgeConfig, type DigraphNodeConfig, type EditorCapabilities, type EmbedEventHandler, type EmbedEventMap, type EmbedEventName, type EmbedMode, type EnsureProjectInput, type EventTypeData, type ExportCallOptions, type ExportFormat, type ExportFormatMap, type ExtractMachinesResponse, type ExtractedMachine, type GetMachineOptions, type GraphPatch, type InitOptions, type Inspector, type InspectorEvents, type MachineConfigOptions, type ManualActorOptions, type OAuthAuthorizationServerMetadata, type OAuthClientRegistrationResponse, type OAuthProtectedResourceMetadata, type OAuthTokenResponse, type PkcePair, type PlanSyncOptions, type ProjectData, type ProjectEmbedMachine, type ProjectMachine, type ProjectVisibility, type PullSyncResult, type PushLocalMachineLinksResult, type PushSyncOptions, type PushSyncProjectOptions, type PushSyncResult, RawCode, type RepoType, type ResolvedSyncInput, type S3UploadTarget, type StateNodeJSONData, type StatelyAction, type StatelyApiClientOptions, StatelyApiError, type StatelyApiUrlOptions, type StatelyAuthMode, type StatelyCredential, type StatelyEdgeData, type StatelyEmbed, type StatelyEmbedOptions, type StatelyGraph, type StatelyGraphData, type StatelyGuard, type StatelyInvoke, type StatelyNodeData, type StatelyPragma, type StatelyPragmaAttachment, type StudioAction, StudioApiError, type StudioClient, type StudioClientOptions, type StudioEdge, type StudioMachine, type StudioMachineRecord, type StudioNode, type SupabaseStorageClient, type SyncInputFormat, type SyncPlan, type SyncPlanSummary, type Transport, type UpdateMachineInput, type UploadResult, type UpsertStatelyPragmaOptions, type VerifyApiKeyResponse, type XStateTSOptions, type XStateVersion, buildAuthorizeUrl, contextSchemaToTSType, createAuthorizationHeader, createPkcePair, createPostMessageTransport, createS3AssetUploadAdapter, createStatelyApiClient, createStatelyApiUrl, createStatelyClient, createStatelyEmbed, createStatelyInspector, createSupabaseAssetUploadAdapter, createWebSocketTransport, discoverAuthorizationServer, discoverProtectedResource, eventsSchemaToTSType, exchangeCodeForToken, findStatelyPragmaAttachments, fromStudioMachine, getCredentialToken, getStatelyPragma, graphToMachineConfig, graphToXStateTS, jsonSchemaToTSType, raw, refreshToken, registerOAuthClient, serializeJS, studioMachineConverter, toStudioMachine, upsertStatelyPragma };

package/dist/index.mjs

@@ -1,10 +1,12 @@
-import { n as createWebSocketTransport, t as createPostMessageTransport } from "./transport-CVZGF0w9.mjs";
+import { n as createWebSocketTransport, t as createPostMessageTransport } from "./transport-D0nlFaLn.mjs";
 import { createStatelyEmbed } from "./embed.mjs";
 import { createS3AssetUploadAdapter, createSupabaseAssetUploadAdapter } from "./assetStorage.mjs";
 import { createStatelyInspector } from "./inspect.mjs";
+import { createAuthorizationHeader, getCredentialToken } from "./auth.mjs";
 import { StudioApiError, createStatelyClient } from "./studio.mjs";
+import { buildAuthorizeUrl, createPkcePair, discoverAuthorizationServer, discoverProtectedResource, exchangeCodeForToken, refreshToken, registerOAuthClient } from "./oauth.mjs";
 import { StatelyApiError, createStatelyApiClient, createStatelyApiUrl } from "./api.mjs";
-import { S as upsertStatelyPragma, a as graphToMachineConfig, b as findStatelyPragmaAttachments, c as serializeJS, i as jsonSchemaToTSType, n as contextSchemaToTSType, o as RawCode, r as eventsSchemaToTSType, s as raw, t as graphToXStateTS, x as getStatelyPragma } from "./graphToXStateTS-DV62vO_d.mjs";
+import { a as eventsSchemaToTSType, c as jsonSchemaToTSType, f as findStatelyPragmaAttachments, l as raw, m as upsertStatelyPragma, n as RawCode, o as graphToMachineConfig, p as getStatelyPragma, r as contextSchemaToTSType, s as graphToXStateTS, u as serializeJS } from "./dist-cQdIPK_n.mjs";
 import { fromStudioMachine, studioMachineConverter, toStudioMachine } from "./graph.mjs";
 
-export { RawCode, StatelyApiError, StudioApiError, contextSchemaToTSType, createPostMessageTransport, createS3AssetUploadAdapter, createStatelyApiClient, createStatelyApiUrl, createStatelyClient, createStatelyEmbed, createStatelyInspector, createSupabaseAssetUploadAdapter, createWebSocketTransport, eventsSchemaToTSType, findStatelyPragmaAttachments, fromStudioMachine, getStatelyPragma, graphToMachineConfig, graphToXStateTS, jsonSchemaToTSType, raw, serializeJS, studioMachineConverter, toStudioMachine, upsertStatelyPragma };
+export { RawCode, StatelyApiError, StudioApiError, buildAuthorizeUrl, contextSchemaToTSType, createAuthorizationHeader, createPkcePair, createPostMessageTransport, createS3AssetUploadAdapter, createStatelyApiClient, createStatelyApiUrl, createStatelyClient, createStatelyEmbed, createStatelyInspector, createSupabaseAssetUploadAdapter, createWebSocketTransport, discoverAuthorizationServer, discoverProtectedResource, eventsSchemaToTSType, exchangeCodeForToken, findStatelyPragmaAttachments, fromStudioMachine, getCredentialToken, getStatelyPragma, graphToMachineConfig, graphToXStateTS, jsonSchemaToTSType, raw, refreshToken, registerOAuthClient, serializeJS, studioMachineConverter, toStudioMachine, upsertStatelyPragma };

package/dist/{inspect-CZ8iLJR7.d.mts → inspect-BmZUcnZB.d.mts}

@@ -1,4 +1,4 @@
-import { EmbedEventMap, ExportCallOptions, ExportFormat, ExportFormatMap, ProtocolMessage } from "./protocol.mjs";
+import { EditorCapabilities, EmbedEventMap, ExportCallOptions, ExportFormat, ExportFormatMap, ProtocolMessage } from "./protocol.mjs";
 
 //#region src/transport.d.ts
 interface Transport {
@@ -153,6 +153,7 @@ interface CreateInspectorOptions {
   theme?: 'light' | 'dark';
   readOnly?: boolean;
   depth?: number;
+  capabilities?: EditorCapabilities;
   /**
    * Advanced: inject a pre-built transport (e.g. a channel from a
    * multiplexed connection). When provided, `url`/`name` are ignored and the

package/dist/inspect.d.mts

@@ -1,3 +1,3 @@
-import { EmbedEventHandler, EmbedEventMap, EmbedEventName, EmbedMode, ExportCallOptions, ExportFormat, ExportFormatMap } from "./protocol.mjs";
-import { a as ManualActorOptions, i as InspectorEvents, n as CreateInspectorOptions, o as createStatelyInspector, r as Inspector, s as Transport, t as AdoptedActor } from "./inspect-CZ8iLJR7.mjs";
-export { AdoptedActor, CreateInspectorOptions, EmbedEventHandler, EmbedEventMap, EmbedEventName, EmbedMode, ExportCallOptions, ExportFormat, ExportFormatMap, Inspector, InspectorEvents, ManualActorOptions, Transport, createStatelyInspector };
+import { EditorCapabilities, EmbedEventHandler, EmbedEventMap, EmbedEventName, EmbedMode, ExportCallOptions, ExportFormat, ExportFormatMap } from "./protocol.mjs";
+import { a as ManualActorOptions, i as InspectorEvents, n as CreateInspectorOptions, o as createStatelyInspector, r as Inspector, s as Transport, t as AdoptedActor } from "./inspect-BmZUcnZB.mjs";
+export { AdoptedActor, CreateInspectorOptions, EditorCapabilities, EmbedEventHandler, EmbedEventMap, EmbedEventName, EmbedMode, ExportCallOptions, ExportFormat, ExportFormatMap, Inspector, InspectorEvents, ManualActorOptions, Transport, createStatelyInspector };

package/dist/inspect.mjs

@@ -1,4 +1,4 @@
-import { i as createPendingExportManager, n as createWebSocketTransport, r as createEventRegistry } from "./transport-CVZGF0w9.mjs";
+import { i as createPendingExportManager, n as createWebSocketTransport, r as createEventRegistry } from "./transport-D0nlFaLn.mjs";
 
 //#region src/inspect.ts
 const defaultSerializeSnapshot = (snapshot) => ({
@@ -11,7 +11,7 @@ function generateSessionId() {
 	return `manual-${Date.now()}-${nextManualId++}`;
 }
 function createStatelyInspector(options = {}) {
-	const { url = "ws://localhost:4242", autoOpen = true, name, serializeSnapshot = defaultSerializeSnapshot, extractMachineConfig = defaultExtractMachineConfig, selectedActorId, panels, theme, readOnly, depth, transport: injectedTransport } = options;
+	const { url = "ws://localhost:4242", autoOpen = true, name, serializeSnapshot = defaultSerializeSnapshot, extractMachineConfig = defaultExtractMachineConfig, selectedActorId, panels, theme, readOnly, depth, capabilities, transport: injectedTransport } = options;
 	const sessionId = options.sessionId ?? generateSessionId();
 	const displayName = name ?? "system:manual";
 	let destroyed = false;
@@ -134,6 +134,7 @@ function createStatelyInspector(options = {}) {
 			...theme && { theme },
 			...readOnly !== void 0 && { readOnly },
 			...depth !== void 0 && { depth },
+			...capabilities !== void 0 && { capabilities },
 			...panels?.leftPanels && { leftPanels: panels.leftPanels },
 			...panels?.rightPanels && { rightPanels: panels.rightPanels },
 			...panels?.activePanels && { activePanels: panels.activePanels }

package/dist/oauth.d.mts

@@ -0,0 +1,77 @@
+//#region src/oauth.d.ts
+interface OAuthProtectedResourceMetadata {
+  resource: string;
+  authorization_servers?: string[];
+  bearer_methods_supported?: string[];
+  scopes_supported?: string[];
+  [key: string]: unknown;
+}
+interface OAuthAuthorizationServerMetadata {
+  issuer: string;
+  authorization_endpoint?: string;
+  registration_endpoint?: string;
+  token_endpoint?: string;
+  code_challenge_methods_supported?: string[];
+  scopes_supported?: string[];
+  [key: string]: unknown;
+}
+interface OAuthClientRegistrationResponse {
+  client_id: string;
+  client_id_issued_at?: number;
+  client_name?: string;
+  client_secret?: string;
+  client_secret_expires_at?: number;
+  redirect_uris?: string[];
+  [key: string]: unknown;
+}
+interface PkcePair {
+  codeVerifier: string;
+  codeChallenge: string;
+}
+interface OAuthTokenResponse {
+  access_token: string;
+  refresh_token?: string;
+  expires_in?: number;
+  expires_at?: number;
+  token_type?: string;
+  scope?: string;
+  [key: string]: unknown;
+}
+declare function discoverProtectedResource(resourceUrl: string | URL, options?: {
+  fetch?: typeof fetch;
+}): Promise<OAuthProtectedResourceMetadata>;
+declare function discoverAuthorizationServer(issuer: string | URL, options?: {
+  fetch?: typeof fetch;
+}): Promise<OAuthAuthorizationServerMetadata>;
+declare function registerOAuthClient(options: {
+  registrationEndpoint: string | URL;
+  redirectUri: string;
+  clientName?: string;
+  scopes?: string[];
+  fetch?: typeof fetch;
+}): Promise<OAuthClientRegistrationResponse>;
+declare function createPkcePair(): Promise<PkcePair>;
+declare function buildAuthorizeUrl(options: {
+  authorizationEndpoint: string | URL;
+  clientId: string;
+  redirectUri: string;
+  codeChallenge: string;
+  state: string;
+  scopes?: string[];
+}): string;
+declare function exchangeCodeForToken(options: {
+  tokenEndpoint: string | URL;
+  code: string;
+  codeVerifier: string;
+  redirectUri: string;
+  clientId: string;
+  fetch?: typeof fetch;
+}): Promise<OAuthTokenResponse>;
+declare function refreshToken(options: {
+  tokenEndpoint: string | URL;
+  refreshToken: string;
+  clientId: string;
+  fetch?: typeof fetch;
+}): Promise<OAuthTokenResponse>;
+//#endregion
+export { OAuthAuthorizationServerMetadata, OAuthClientRegistrationResponse, OAuthProtectedResourceMetadata, OAuthTokenResponse, PkcePair, buildAuthorizeUrl, createPkcePair, discoverAuthorizationServer, discoverProtectedResource, exchangeCodeForToken, refreshToken, registerOAuthClient };

package/dist/oauth.mjs

@@ -0,0 +1,118 @@
+//#region src/oauth.ts
+function getFetch(fetchImpl) {
+	const resolvedFetch = fetchImpl ?? globalThis.fetch;
+	if (!resolvedFetch) throw new Error("No fetch implementation available.");
+	return resolvedFetch;
+}
+async function fetchJson(url, fetchImpl) {
+	const response = await getFetch(fetchImpl)(url, { headers: { Accept: "application/json" } });
+	if (!response.ok) throw new Error(`${url} failed with HTTP ${response.status}`);
+	return response.json();
+}
+async function getOAuthResponseError(response) {
+	const detail = (await response.text().catch(() => "")).trim();
+	return detail ? `: ${detail}` : "";
+}
+async function discoverProtectedResource(resourceUrl, options = {}) {
+	const resource = new URL(String(resourceUrl));
+	const pathParts = resource.pathname.split("/").filter(Boolean);
+	const baseParts = pathParts.length > 2 && pathParts[0] !== "api" ? pathParts.slice(0, 1) : [];
+	const metadataUrl = new URL(resource.origin);
+	metadataUrl.pathname = [
+		...baseParts,
+		".well-known",
+		"oauth-protected-resource",
+		...pathParts
+	].join("/");
+	return fetchJson(metadataUrl.toString(), options.fetch);
+}
+async function discoverAuthorizationServer(issuer, options = {}) {
+	return fetchJson(getAuthorizationServerMetadataUrl(new URL(String(issuer))).toString(), options.fetch);
+}
+async function registerOAuthClient(options) {
+	const response = await getFetch(options.fetch)(String(options.registrationEndpoint), {
+		method: "POST",
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			client_name: options.clientName ?? "Stately CLI",
+			redirect_uris: [options.redirectUri],
+			token_endpoint_auth_method: "none",
+			grant_types: ["authorization_code", "refresh_token"],
+			response_types: ["code"],
+			...options.scopes?.length ? { scope: options.scopes.join(" ") } : {}
+		})
+	});
+	if (!response.ok) throw new Error(`OAuth client registration failed with HTTP ${response.status}${await getOAuthResponseError(response)}`);
+	return response.json();
+}
+function getAuthorizationServerMetadataUrl(issuerUrl) {
+	const issuerPathParts = issuerUrl.pathname.split("/").filter(Boolean);
+	const oauthMetadataUrl = new URL(issuerUrl.origin);
+	oauthMetadataUrl.pathname = [
+		".well-known",
+		"oauth-authorization-server",
+		...issuerPathParts
+	].join("/");
+	return oauthMetadataUrl;
+}
+function base64UrlEncode(bytes) {
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+}
+async function createPkcePair() {
+	const verifierBytes = new Uint8Array(32);
+	crypto.getRandomValues(verifierBytes);
+	const codeVerifier = base64UrlEncode(verifierBytes);
+	return {
+		codeVerifier,
+		codeChallenge: base64UrlEncode(new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(codeVerifier))))
+	};
+}
+function buildAuthorizeUrl(options) {
+	const url = new URL(String(options.authorizationEndpoint));
+	url.searchParams.set("response_type", "code");
+	url.searchParams.set("client_id", options.clientId);
+	url.searchParams.set("redirect_uri", options.redirectUri);
+	url.searchParams.set("code_challenge", options.codeChallenge);
+	url.searchParams.set("code_challenge_method", "S256");
+	url.searchParams.set("state", options.state);
+	if (options.scopes?.length) url.searchParams.set("scope", options.scopes.join(" "));
+	return url.toString();
+}
+async function exchangeCodeForToken(options) {
+	const body = new URLSearchParams({
+		grant_type: "authorization_code",
+		code: options.code,
+		code_verifier: options.codeVerifier,
+		redirect_uri: options.redirectUri,
+		client_id: options.clientId
+	});
+	const response = await getFetch(options.fetch)(String(options.tokenEndpoint), {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded" },
+		body
+	});
+	if (!response.ok) throw new Error(`Token exchange failed with HTTP ${response.status}${await getOAuthResponseError(response)}`);
+	return response.json();
+}
+async function refreshToken(options) {
+	const body = new URLSearchParams({
+		grant_type: "refresh_token",
+		refresh_token: options.refreshToken,
+		client_id: options.clientId
+	});
+	const response = await getFetch(options.fetch)(String(options.tokenEndpoint), {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded" },
+		body
+	});
+	if (!response.ok) throw new Error(`Token refresh failed with HTTP ${response.status}${await getOAuthResponseError(response)}`);
+	return response.json();
+}
+
+//#endregion
+export { buildAuthorizeUrl, createPkcePair, discoverAuthorizationServer, discoverProtectedResource, exchangeCodeForToken, refreshToken, registerOAuthClient };

package/dist/patchTypes.d.mts

@@ -1,249 +1,2 @@
-//#region src/patchTypes.d.ts
-type EditorStateType = 'normal' | 'parallel' | 'history' | 'final' | null;
-type CanvasColor = 'green' | 'red' | 'purple' | 'blue' | 'orange' | 'yellow' | 'pink' | 'teal';
-type ActionLocation = {
-  nodeId: string;
-  group: 'entry' | 'exit';
-} | {
-  edgeId: string;
-  group: 'transition';
-};
-type ImplementationSourceType = 'action' | 'guard' | 'actor' | 'delay';
-type GraphPatch = {
-  op: 'createNode';
-  description?: string;
-  id?: string;
-  parentId: string;
-  key: string;
-  type?: EditorStateType;
-  x?: number;
-  y?: number;
-} | {
-  op: 'updateNode';
-  description?: string;
-  nodeId: string;
-  data: {
-    key?: string;
-    type?: EditorStateType;
-    description?: string;
-    initialId?: string | null;
-  };
-} | {
-  op: 'deleteNode';
-  description?: string;
-  nodeId: string;
-} | {
-  op: 'createEdge';
-  description?: string;
-  id?: string;
-  sourceId: string;
-  targetId: string;
-  eventType: string;
-  transitionType?: 'normal' | 'targetless' | 'reenter';
-} | {
-  op: 'updateEdge';
-  description?: string;
-  edgeId: string;
-  data: {
-    sourceId?: string;
-    targetId?: string;
-    eventType?: string;
-    transitionType?: 'normal' | 'targetless' | 'reenter';
-    description?: string | null;
-  };
-} | {
-  op: 'deleteEdge';
-  description?: string;
-  edgeId: string;
-} | {
-  op: 'createState';
-  description?: string;
-  id?: string;
-  parentId: string;
-  key: string;
-  type?: EditorStateType;
-  x?: number;
-  y?: number;
-  color?: CanvasColor | null;
-  initial?: boolean;
-} | {
-  op: 'updateState';
-  description?: string;
-  stateId: string;
-  key?: string;
-  type?: EditorStateType;
-  stateDescription?: string;
-  initialId?: string | null;
-  color?: CanvasColor | null;
-  meta?: Record<string, unknown> | null;
-  history?: 'shallow' | 'deep' | null;
-} | {
-  op: 'deleteState';
-  description?: string;
-  stateId: string;
-} | {
-  op: 'createTransition';
-  description?: string;
-  id?: string;
-  sourceId: string;
-  targetId: string;
-  eventType: string;
-  transitionType?: 'normal' | 'targetless' | 'reenter';
-  guard?: {
-    type: string;
-    code?: string;
-    params?: Record<string, unknown>;
-  };
-  color?: CanvasColor | null;
-  transitionDescription?: string | null;
-} | {
-  op: 'updateTransition';
-  description?: string;
-  transitionId: string;
-  sourceId?: string;
-  targetId?: string;
-  eventType?: string;
-  transitionType?: 'normal' | 'targetless' | 'reenter';
-  transitionDescription?: string | null;
-  color?: CanvasColor | null;
-  meta?: Record<string, unknown> | null;
-} | {
-  op: 'deleteTransition';
-  description?: string;
-  transitionId: string;
-} | {
-  op: 'createAction';
-  description?: string;
-  location: ActionLocation;
-  action: {
-    id?: string;
-    type: string;
-    params?: Record<string, unknown>;
-    code?: string;
-  };
-  index?: number;
-} | {
-  op: 'updateAction';
-  description?: string;
-  location: ActionLocation;
-  actionId: string;
-  data: {
-    type?: string;
-    params?: Record<string, unknown>;
-    code?: string;
-  };
-} | {
-  op: 'deleteAction';
-  description?: string;
-  location: ActionLocation;
-  actionId: string;
-} | {
-  op: 'createInvoke';
-  description?: string;
-  nodeId: string;
-  invoke: {
-    id?: string;
-    src: string;
-    code?: string;
-    input?: Record<string, unknown>;
-    output?: Record<string, unknown>;
-  };
-} | {
-  op: 'updateInvoke';
-  description?: string;
-  nodeId: string;
-  invokeId: string;
-  data: {
-    src?: string;
-    code?: string;
-    input?: Record<string, unknown>;
-    output?: Record<string, unknown>;
-  };
-} | {
-  op: 'deleteInvoke';
-  description?: string;
-  nodeId: string;
-  invokeId: string;
-} | {
-  op: 'createImplementation';
-  description?: string;
-  sourceType: ImplementationSourceType;
-  implementation: {
-    id: string;
-    name?: string;
-    code?: string;
-  };
-} | {
-  op: 'updateImplementation';
-  description?: string;
-  sourceType: ImplementationSourceType;
-  implementationId: string;
-  data: {
-    name?: string;
-    code?: string;
-  };
-} | {
-  op: 'deleteImplementation';
-  description?: string;
-  sourceType: ImplementationSourceType;
-  implementationId: string;
-} | {
-  op: 'setGuard';
-  description?: string;
-  edgeId: string;
-  guard: {
-    type: string;
-    code?: string;
-    params?: Record<string, unknown>;
-  };
-} | {
-  op: 'deleteGuard';
-  description?: string;
-  edgeId: string;
-} | {
-  op: 'createTag';
-  description?: string;
-  nodeId: string;
-  tag: {
-    name: string;
-  };
-} | {
-  op: 'deleteTag';
-  description?: string;
-  nodeId: string;
-  tagName: string;
-} | {
-  op: 'createAnnotation';
-  description?: string;
-  id?: string;
-  parentId: string | null;
-  content: string;
-  x?: number;
-  y?: number;
-} | {
-  op: 'updateAnnotation';
-  description?: string;
-  annotationId: string;
-  data: {
-    content?: string;
-  };
-} | {
-  op: 'deleteAnnotation';
-  description?: string;
-  annotationId: string;
-} | {
-  op: 'setContext';
-  description?: string;
-  context: Record<string, unknown>;
-} | {
-  op: 'updateSchemas';
-  description?: string;
-  schemas: {
-    context?: Record<string, unknown> | null;
-    events?: Record<string, unknown> | null;
-    input?: unknown | null;
-    output?: unknown | null;
-  };
-};
-//#endregion
-export { ActionLocation, CanvasColor, EditorStateType, GraphPatch, ImplementationSourceType };
+import { a as EditorStateType, n as CanvasColor, o as GraphPatch, s as ImplementationSourceType, t as ActionLocation } from "./index-BpUKBSiq.mjs";
+export { type ActionLocation, type CanvasColor, type EditorStateType, type GraphPatch, type ImplementationSourceType };