@statelyai/sdk 0.11.0 → 0.12.1

package/dist/protocol.d.mts

@@ -18,6 +18,25 @@ interface ValidationIssue {
   level: "info" | "warning" | "error";
   message: string;
 }
+interface EditorCapabilities {
+  edit?: boolean;
+  export?: boolean;
+  ai?: boolean;
+  simulate?: boolean;
+  inspect?: boolean;
+  navigateHierarchy?: boolean;
+  maxDepth?: number;
+  panels?: string[];
+  commands?: string[];
+}
+type CapabilityDeniedCapability = "edit" | "export" | "ai" | "simulate" | "inspect" | "navigateHierarchy" | "panel" | "mode";
+interface CapabilityDeniedEvent {
+  capability: CapabilityDeniedCapability;
+  action: "openPanel" | "openDialog" | "editSource" | "navigateHierarchy" | "setMode" | "simulationStart" | "inspectStart" | "retrieve";
+  requested?: string;
+  message: string;
+  dedupeKey: string;
+}
 interface SourceRange {
   startLine: number;
   startChar: number;
@@ -142,6 +161,7 @@ interface EmbedEventMap {
     code: string;
     message: string;
   };
+  capabilityDenied: CapabilityDeniedEvent;
   snapshot: {
     snapshot: unknown;
     event: unknown | null;
@@ -159,6 +179,7 @@ interface MachineInitOptions {
   theme?: "light" | "dark";
   readOnly?: boolean;
   depth?: number;
+  capabilities?: EditorCapabilities;
   panels?: {
     leftPanels?: string[];
     rightPanels?: string[];
@@ -191,6 +212,7 @@ interface ProjectInitOptions {
   theme?: "light" | "dark";
   readOnly?: boolean;
   depth?: number;
+  capabilities?: EditorCapabilities;
   panels?: {
     leftPanels?: string[];
     rightPanels?: string[];
@@ -212,6 +234,7 @@ interface InitMessage {
   theme?: "light" | "dark";
   readOnly?: boolean;
   depth?: number;
+  capabilities?: EditorCapabilities;
   leftPanels?: string[];
   rightPanels?: string[];
   activePanels?: string[];
@@ -234,6 +257,7 @@ interface ProjectInitMessage {
   theme?: "light" | "dark";
   readOnly?: boolean;
   depth?: number;
+  capabilities?: EditorCapabilities;
   leftPanels?: string[];
   rightPanels?: string[];
   activePanels?: string[];
@@ -317,6 +341,7 @@ interface SystemInitMessage {
   theme?: "light" | "dark";
   readOnly?: boolean;
   depth?: number;
+  capabilities?: EditorCapabilities;
   leftPanels?: string[];
   rightPanels?: string[];
   activePanels?: string[];
@@ -387,6 +412,9 @@ interface ErrorMessage {
   message: string;
   requestId?: string;
 }
+interface CapabilityDeniedMessage extends CapabilityDeniedEvent {
+  type: "@statelyai.capabilityDenied";
+}
 /** File metadata sent from viz to SDK when a file needs uploading. */
 interface UploadFileInfo {
   /** Original filename (e.g. "screenshot.png") */
@@ -430,7 +458,7 @@ interface UploadResponseMessage {
 /** All messages a client (embed/inspector) can send to the viz. */
 type ClientMessage = InitMessage | ProjectInitMessage | ProjectUpdateMessage | ProjectSelectMachineMessage | UpdateMessage | SetModeMessage | SetThemeMessage | SetSettingsMessage | RetrieveMessage | ToastMessage | InspectSnapshotMessage | SystemInitMessage | SystemActorRegisteredMessage | SystemActorSnapshotMessage | SystemActorStoppedMessage | UploadCapabilitiesMessage | UploadResponseMessage | ErrorMessage;
 /** All messages the viz can send back to a client. */
-type VizMessage = ReadyMessage | LoadedMessage | ChangeMessage | SaveMessage | ProjectMachineSelectedMessage | RetrievedMessage | ErrorMessage | UploadRequestMessage;
+type VizMessage = ReadyMessage | LoadedMessage | ChangeMessage | SaveMessage | ProjectMachineSelectedMessage | RetrievedMessage | ErrorMessage | CapabilityDeniedMessage | UploadRequestMessage;
 interface RegisterMessage {
   type: "@statelyai.register";
   role: "client" | "viz";
@@ -478,4 +506,4 @@ type SessionMessage = RegisterMessage | RegisteredMessage | RequestOpenMessage |
 type ProtocolMessage = ClientMessage | VizMessage | SessionMessage;
 declare const PREFIX = "@statelyai.";
 //#endregion
-export { ActorSystemEntry, AddSessionMessage, ChangeMessage, ClientMessage, CommentsConfig, EmbedEventHandler, EmbedEventMap, EmbedEventName, EmbedMode, ErrorMessage, ExportCallOptions, ExportFormat, ExportFormatMap, InitMessage, InitOptions, InspectSnapshotMessage, LoadedMessage, MachineInitOptions, MachineSourceLocations, PREFIX, ProjectEmbedMachine, ProjectInitMessage, ProjectInitOptions, ProjectMachineSelectedMessage, ProjectSelectMachineMessage, ProjectUpdateMessage, ProtocolMessage, ReadyMessage, RegisterMessage, RegisteredMessage, RequestOpenMessage, RetrieveMessage, RetrievedMessage, SaveMessage, SessionAddedMessage, SessionMessage, SetModeMessage, SetSettingsMessage, SetThemeMessage, SourceLocation, SourceRange, StateSourceLocation, SystemActorRegisteredMessage, SystemActorSnapshotMessage, SystemActorStoppedMessage, SystemInitMessage, ToastMessage, UpdateMessage, UploadCapabilitiesMessage, UploadFileInfo, UploadRequestMessage, UploadResponseMessage, UploadResult, ValidationIssue, VizMessage };
+export { ActorSystemEntry, AddSessionMessage, CapabilityDeniedCapability, CapabilityDeniedEvent, CapabilityDeniedMessage, ChangeMessage, ClientMessage, CommentsConfig, EditorCapabilities, EmbedEventHandler, EmbedEventMap, EmbedEventName, EmbedMode, ErrorMessage, ExportCallOptions, ExportFormat, ExportFormatMap, InitMessage, InitOptions, InspectSnapshotMessage, LoadedMessage, MachineInitOptions, MachineSourceLocations, PREFIX, ProjectEmbedMachine, ProjectInitMessage, ProjectInitOptions, ProjectMachineSelectedMessage, ProjectSelectMachineMessage, ProjectUpdateMessage, ProtocolMessage, ReadyMessage, RegisterMessage, RegisteredMessage, RequestOpenMessage, RetrieveMessage, RetrievedMessage, SaveMessage, SessionAddedMessage, SessionMessage, SetModeMessage, SetSettingsMessage, SetThemeMessage, SourceLocation, SourceRange, StateSourceLocation, SystemActorRegisteredMessage, SystemActorSnapshotMessage, SystemActorStoppedMessage, SystemInitMessage, ToastMessage, UpdateMessage, UploadCapabilitiesMessage, UploadFileInfo, UploadRequestMessage, UploadResponseMessage, UploadResult, ValidationIssue, VizMessage };

package/dist/studio.d.mts

@@ -1,7 +1,12 @@
+import { n as StatelyCredential, t as StatelyAuthMode } from "./auth-DO1-eQcU.mjs";
+
 //#region src/studio.d.ts
 interface StudioClientOptions {
   baseUrl?: string;
+  credential?: StatelyCredential;
+  /** @deprecated Use credential: { type: 'api_key', token }. */
   apiKey?: string;
+  authMode?: StatelyAuthMode;
   fetch?: typeof fetch;
 }
 interface VerifyApiKeyResponse {
@@ -93,7 +98,7 @@ declare class StudioApiError extends Error {
 }
 interface StudioClient {
   auth: {
-    verify(apiKey?: string): Promise<VerifyApiKeyResponse>;
+    verify(credential?: StatelyCredential | string): Promise<VerifyApiKeyResponse>;
   };
   projects: {
     list(): Promise<ProjectData[]>;
@@ -109,7 +114,9 @@ interface StudioClient {
   };
   code: {
     extractMachines(code: string, options?: {
+      credential?: StatelyCredential | null; /** @deprecated Use credential. */
       apiKey?: string | null;
+      authMode?: StatelyAuthMode;
     }): Promise<ExtractMachinesResponse>;
   };
 }

package/dist/studio.mjs

@@ -1,3 +1,5 @@
+import { createAuthorizationHeader, getCredentialToken } from "./auth.mjs";
+
 //#region src/studio.ts
 var StudioApiError = class extends Error {
 	status;
@@ -79,10 +81,19 @@ function connectedReposMatch(left, right) {
 function createStatelyClient(options = {}) {
 	const baseUrl = options.baseUrl ?? "https://stately.ai";
 	const fetchImpl = getFetch(options.fetch);
-	async function request(path, init = {}, apiKeyOverride) {
+	const defaultCredential = options.credential ?? (options.apiKey ? {
+		type: "api_key",
+		token: options.apiKey
+	} : void 0);
+	const defaultAuthMode = options.authMode ?? "auto";
+	async function request(path, init = {}, credentialOverride, authModeOverride) {
 		const headers = new Headers(init.headers);
-		const apiKey = apiKeyOverride ?? options.apiKey;
-		if (apiKey) headers.set("Authorization", `Bearer ${apiKey}`);
+		const authMode = authModeOverride ?? defaultAuthMode;
+		const credential = credentialOverride ?? defaultCredential;
+		if (authMode !== "none") {
+			if (!getCredentialToken(credential) || !credential) throw new StudioApiError("No Stately credential configured. Pass createStatelyClient({ credential }) or set authMode: \"none\" for no-auth self-hosted deployments.", 401);
+			headers.set("Authorization", createAuthorizationHeader(credential));
+		}
 		const response = await fetchImpl(joinApiUrl(baseUrl, path), {
 			...init,
 			headers
@@ -92,8 +103,8 @@ function createStatelyClient(options = {}) {
 		return unwrapResponseData(data);
 	}
 	return {
-		auth: { verify(apiKey) {
-			return request("/verify", { method: "GET" }, apiKey);
+		auth: { verify(credential) {
+			return request("/verify", { method: "GET" }, credential);
 		} },
 		projects: {
 			list() {
@@ -143,12 +154,15 @@ function createStatelyClient(options = {}) {
 			}
 		},
 		code: { extractMachines(code, extractOptions = {}) {
-			const apiKey = extractOptions.apiKey ?? options.apiKey ?? "anonymous";
+			const credential = extractOptions.credential ?? (extractOptions.apiKey ? {
+				type: "api_key",
+				token: extractOptions.apiKey
+			} : void 0);
 			return request("/code", {
 				method: "POST",
 				headers: { "Content-Type": "application/json" },
 				body: JSON.stringify({ code })
-			}, apiKey);
+			}, credential, extractOptions.authMode);
 		} }
 	};
 }

package/dist/sync.d.mts

@@ -1,4 +1,4 @@
-import { b as DigraphConfig, i as StatelyGraph } from "./graph-GeuH-mFK.mjs";
+import { b as DigraphConfig, i as StatelyGraph } from "./graph-Bm4_GZX_.mjs";
 import { CreateProjectInput, ProjectData, StudioClient, StudioMachineRecord, XStateVersion } from "./studio.mjs";
 import { GraphDiff } from "@statelyai/graph";