@civitai/app-sdk 0.13.1 → 0.15.0

package/dist/scopes/index.d.ts

@@ -48,12 +48,36 @@ export declare const TokenScopePresets: {
     readonly Full: number;
 };
 export type TokenScopePresetKey = keyof typeof TokenScopePresets;
-/** True if the given bitmask grants the named scope. */
+/**
+ * True if the given bitmask grants the named scope.
+ *
+ * @example
+ * if (hasScope(token.scope, TokenScope.AIServicesWrite)) allowGeneration();
+ */
 export declare function hasScope(bitmask: number, scope: number): boolean;
-/** Return the list of named scopes contained in a bitmask. */
+/**
+ * Return the list of named scopes contained in a bitmask (excludes the
+ * `None`/`Full` aggregates). The inverse of {@link bitmaskFromScopes}.
+ *
+ * @example
+ * scopesFromBitmask(token.scope); // e.g. ['UserRead', 'AIServicesWrite', 'BuzzRead']
+ */
 export declare function scopesFromBitmask(bitmask: number): TokenScopeKey[];
-/** Combine a list of named scopes into a single bitmask. */
+/**
+ * Combine a list of named scopes into a single bitmask — use this to build the
+ * `scope` you pass to {@link buildAuthorizeUrl} instead of a magic number.
+ *
+ * @example
+ * const scope = bitmaskFromScopes(['AIServicesWrite', 'BuzzRead', 'UserRead']);
+ */
 export declare function bitmaskFromScopes(scopes: readonly TokenScopeKey[]): number;
-/** Human-readable label for a tokenScope bitmask (matches the Civitai UI). */
+/**
+ * Human-readable label for a tokenScope bitmask (matches the Civitai UI).
+ * Returns a preset name (`Full Access`/`Read Only`/`Creator`/`AI Services`),
+ * `Legacy` for `null`/`undefined`, or `Custom` for any other combination.
+ *
+ * @example
+ * getScopeLabel(token.scope); // 'AI Services' | 'Custom' | …
+ */
 export declare function getScopeLabel(tokenScope: number | null | undefined): string;
 //# sourceMappingURL=index.d.ts.map

package/dist/scopes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scopes/index.ts"],"names":[],"mappings":"AASA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDb,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,OAAO,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA0BnD,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;CAmCpB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAEjE,wDAAwD;AACxD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE,CASlE;AAED,4DAA4D;AAC5D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,CAI1E;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAO3E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scopes/index.ts"],"names":[],"mappings":"AASA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDb,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,OAAO,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA0BnD,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;CAmCpB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAEjE;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE,CASlE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,CAI1E;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAO3E"}

package/dist/scopes/index.js

@@ -118,11 +118,22 @@ export const TokenScopePresets = {
         TokenScope.BuzzRead,
     Full: TokenScope.Full,
 };
-/** True if the given bitmask grants the named scope. */
+/**
+ * True if the given bitmask grants the named scope.
+ *
+ * @example
+ * if (hasScope(token.scope, TokenScope.AIServicesWrite)) allowGeneration();
+ */
 export function hasScope(bitmask, scope) {
     return (bitmask & scope) === scope;
 }
-/** Return the list of named scopes contained in a bitmask. */
+/**
+ * Return the list of named scopes contained in a bitmask (excludes the
+ * `None`/`Full` aggregates). The inverse of {@link bitmaskFromScopes}.
+ *
+ * @example
+ * scopesFromBitmask(token.scope); // e.g. ['UserRead', 'AIServicesWrite', 'BuzzRead']
+ */
 export function scopesFromBitmask(bitmask) {
     const out = [];
     for (const [name, bit] of Object.entries(TokenScope)) {
@@ -134,14 +145,27 @@ export function scopesFromBitmask(bitmask) {
     }
     return out;
 }
-/** Combine a list of named scopes into a single bitmask. */
+/**
+ * Combine a list of named scopes into a single bitmask — use this to build the
+ * `scope` you pass to {@link buildAuthorizeUrl} instead of a magic number.
+ *
+ * @example
+ * const scope = bitmaskFromScopes(['AIServicesWrite', 'BuzzRead', 'UserRead']);
+ */
 export function bitmaskFromScopes(scopes) {
     let mask = 0;
     for (const s of scopes)
         mask |= TokenScope[s];
     return mask;
 }
-/** Human-readable label for a tokenScope bitmask (matches the Civitai UI). */
+/**
+ * Human-readable label for a tokenScope bitmask (matches the Civitai UI).
+ * Returns a preset name (`Full Access`/`Read Only`/`Creator`/`AI Services`),
+ * `Legacy` for `null`/`undefined`, or `Custom` for any other combination.
+ *
+ * @example
+ * getScopeLabel(token.scope); // 'AI Services' | 'Custom' | …
+ */
 export function getScopeLabel(tokenScope) {
     if (tokenScope == null)
         return 'Legacy';

package/dist/scopes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scopes/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,gDAAgD;AAChD,mEAAmE;AACnE,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,sCAAsC;AAEtC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,CAAC;IAEP,oBAAoB;IACpB,QAAQ,EAAE,CAAC,IAAI,CAAC;IAChB,SAAS,EAAE,CAAC,IAAI,CAAC;IAEjB,qBAAqB;IACrB,UAAU,EAAE,CAAC,IAAI,CAAC;IAClB,WAAW,EAAE,CAAC,IAAI,CAAC;IACnB,YAAY,EAAE,CAAC,IAAI,CAAC;IAEpB,wCAAwC;IACxC,SAAS,EAAE,CAAC,IAAI,CAAC;IACjB,UAAU,EAAE,CAAC,IAAI,CAAC;IAClB,WAAW,EAAE,CAAC,IAAI,CAAC;IAEnB,WAAW;IACX,YAAY,EAAE,CAAC,IAAI,CAAC;IACpB,aAAa,EAAE,CAAC,IAAI,CAAC;IACrB,cAAc,EAAE,CAAC,IAAI,EAAE;IAEvB,oEAAoE;IACpE,YAAY,EAAE,CAAC,IAAI,EAAE;IACrB,aAAa,EAAE,CAAC,IAAI,EAAE;IACtB,cAAc,EAAE,CAAC,IAAI,EAAE;IAEvB,0EAA0E;IAC1E,4DAA4D;IAC5D,cAAc,EAAE,CAAC,IAAI,EAAE;IACvB,eAAe,EAAE,CAAC,IAAI,EAAE;IAExB,kBAAkB;IAClB,QAAQ,EAAE,CAAC,IAAI,EAAE;IAEjB,6BAA6B;IAC7B,eAAe,EAAE,CAAC,IAAI,EAAE;IACxB,gBAAgB,EAAE,CAAC,IAAI,EAAE;IACzB,WAAW,EAAE,CAAC,IAAI,EAAE;IACpB,SAAS,EAAE,CAAC,IAAI,EAAE;IAElB,gBAAgB;IAChB,iBAAiB,EAAE,CAAC,IAAI,EAAE;IAC1B,kBAAkB,EAAE,CAAC,IAAI,EAAE;IAE3B,QAAQ;IACR,SAAS,EAAE,CAAC,IAAI,EAAE;IAClB,UAAU,EAAE,CAAC,IAAI,EAAE;IAEnB,aAAa;IACb,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC;CACX,CAAC;AAKX,MAAM,CAAC,MAAM,gBAAgB,GAA2B;IACtD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,gCAAgC;IACvD,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,2BAA2B;IACnD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,0BAA0B;IACnD,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,sBAAsB;IAChD,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,eAAe;IAC1C,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,6BAA6B;IACrD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,6BAA6B;IACtD,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,sBAAsB;IAChD,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,eAAe;IAC1C,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,wBAAwB;IACpD,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,iBAAiB;IAC9C,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,eAAe;IAC1C,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,0BAA0B;IACtD,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,iBAAiB;IAC9C,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,oCAAoC;IACjE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,wBAAwB;IACtD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,6BAA6B;IACpD,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,kBAAkB;IAChD,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,oBAAoB;IACnD,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,iCAAiC;IAC3D,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,iBAAiB;IACzC,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,oBAAoB;IACpD,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,iCAAiC;IAClE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,YAAY;IACpC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,cAAc;CACxC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,EACN,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,eAAe;QAC1B,UAAU,CAAC,cAAc;QACzB,UAAU,CAAC,iBAAiB;QAC5B,UAAU,CAAC,SAAS;IACtB,OAAO,EACL,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,eAAe;QAC1B,UAAU,CAAC,cAAc;QACzB,UAAU,CAAC,iBAAiB;QAC5B,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,WAAW;QACtB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,aAAa;QACxB,UAAU,CAAC,aAAa;QACxB,UAAU,CAAC,gBAAgB;QAC3B,UAAU,CAAC,WAAW;IACxB,UAAU,EACR,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,eAAe;QAC1B,UAAU,CAAC,cAAc;QACzB,UAAU,CAAC,QAAQ;IACrB,IAAI,EAAE,UAAU,CAAC,IAAI;CACb,CAAC;AAIX,wDAAwD;AACxD,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,KAAa;IACrD,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC;AACrC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;YAAE,SAAS;QACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;YACpE,GAAG,CAAC,IAAI,CAAC,IAAqB,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,iBAAiB,CAAC,MAAgC;IAChE,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,UAAqC;IACjE,IAAI,UAAU,IAAI,IAAI;QAAE,OAAO,QAAQ,CAAC;IACxC,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI;QAAE,OAAO,aAAa,CAAC;IACzD,IAAI,UAAU,KAAK,iBAAiB,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IAClE,IAAI,UAAU,KAAK,iBAAiB,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,UAAU,KAAK,iBAAiB,CAAC,UAAU;QAAE,OAAO,aAAa,CAAC;IACtE,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scopes/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,gDAAgD;AAChD,mEAAmE;AACnE,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,sCAAsC;AAEtC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,CAAC;IAEP,oBAAoB;IACpB,QAAQ,EAAE,CAAC,IAAI,CAAC;IAChB,SAAS,EAAE,CAAC,IAAI,CAAC;IAEjB,qBAAqB;IACrB,UAAU,EAAE,CAAC,IAAI,CAAC;IAClB,WAAW,EAAE,CAAC,IAAI,CAAC;IACnB,YAAY,EAAE,CAAC,IAAI,CAAC;IAEpB,wCAAwC;IACxC,SAAS,EAAE,CAAC,IAAI,CAAC;IACjB,UAAU,EAAE,CAAC,IAAI,CAAC;IAClB,WAAW,EAAE,CAAC,IAAI,CAAC;IAEnB,WAAW;IACX,YAAY,EAAE,CAAC,IAAI,CAAC;IACpB,aAAa,EAAE,CAAC,IAAI,CAAC;IACrB,cAAc,EAAE,CAAC,IAAI,EAAE;IAEvB,oEAAoE;IACpE,YAAY,EAAE,CAAC,IAAI,EAAE;IACrB,aAAa,EAAE,CAAC,IAAI,EAAE;IACtB,cAAc,EAAE,CAAC,IAAI,EAAE;IAEvB,0EAA0E;IAC1E,4DAA4D;IAC5D,cAAc,EAAE,CAAC,IAAI,EAAE;IACvB,eAAe,EAAE,CAAC,IAAI,EAAE;IAExB,kBAAkB;IAClB,QAAQ,EAAE,CAAC,IAAI,EAAE;IAEjB,6BAA6B;IAC7B,eAAe,EAAE,CAAC,IAAI,EAAE;IACxB,gBAAgB,EAAE,CAAC,IAAI,EAAE;IACzB,WAAW,EAAE,CAAC,IAAI,EAAE;IACpB,SAAS,EAAE,CAAC,IAAI,EAAE;IAElB,gBAAgB;IAChB,iBAAiB,EAAE,CAAC,IAAI,EAAE;IAC1B,kBAAkB,EAAE,CAAC,IAAI,EAAE;IAE3B,QAAQ;IACR,SAAS,EAAE,CAAC,IAAI,EAAE;IAClB,UAAU,EAAE,CAAC,IAAI,EAAE;IAEnB,aAAa;IACb,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC;CACX,CAAC;AAKX,MAAM,CAAC,MAAM,gBAAgB,GAA2B;IACtD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,gCAAgC;IACvD,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,2BAA2B;IACnD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,0BAA0B;IACnD,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,sBAAsB;IAChD,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,eAAe;IAC1C,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,6BAA6B;IACrD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,6BAA6B;IACtD,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,sBAAsB;IAChD,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,eAAe;IAC1C,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,wBAAwB;IACpD,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,iBAAiB;IAC9C,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,eAAe;IAC1C,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,0BAA0B;IACtD,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,iBAAiB;IAC9C,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,oCAAoC;IACjE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,wBAAwB;IACtD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,6BAA6B;IACpD,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,kBAAkB;IAChD,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,oBAAoB;IACnD,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,iCAAiC;IAC3D,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,iBAAiB;IACzC,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,oBAAoB;IACpD,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,iCAAiC;IAClE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,YAAY;IACpC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,cAAc;CACxC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,EACN,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,eAAe;QAC1B,UAAU,CAAC,cAAc;QACzB,UAAU,CAAC,iBAAiB;QAC5B,UAAU,CAAC,SAAS;IACtB,OAAO,EACL,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,eAAe;QAC1B,UAAU,CAAC,cAAc;QACzB,UAAU,CAAC,iBAAiB;QAC5B,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,WAAW;QACtB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,aAAa;QACxB,UAAU,CAAC,aAAa;QACxB,UAAU,CAAC,gBAAgB;QAC3B,UAAU,CAAC,WAAW;IACxB,UAAU,EACR,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,eAAe;QAC1B,UAAU,CAAC,cAAc;QACzB,UAAU,CAAC,QAAQ;IACrB,IAAI,EAAE,UAAU,CAAC,IAAI;CACb,CAAC;AAIX;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,KAAa;IACrD,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;YAAE,SAAS;QACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;YACpE,GAAG,CAAC,IAAI,CAAC,IAAqB,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgC;IAChE,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,UAAqC;IACjE,IAAI,UAAU,IAAI,IAAI;QAAE,OAAO,QAAQ,CAAC;IACxC,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI;QAAE,OAAO,aAAa,CAAC;IACzD,IAAI,UAAU,KAAK,iBAAiB,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IAClE,IAAI,UAAU,KAAK,iBAAiB,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,UAAU,KAAK,iBAAiB,CAAC,UAAU;QAAE,OAAO,aAAa,CAAC;IACtE,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civitai/app-sdk",
-  "version": "0.13.1",
+  "version": "0.15.0",
   "description": "OAuth + PKCE, encrypted-cookie sessions, scopes, and orchestrator helpers for building third-party Civitai apps.",
   "license": "MIT",
   "type": "module",

package/schemas/app-block/v1.json

@@ -1,184 +1,195 @@
 {
-  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://civitai.com/schemas/app-block/v1.json",
-  "title": "Civitai App Block Manifest v1",
-  "description": "Manifest shape for a Civitai App Block. Mirrors the runtime check performed by defineBlock() in @civitai/app-sdk/blocks.",
+  "title": "Civitai App Block Manifest",
+  "description": "THE canonical, server-published schema for block.manifest.json — the ONLY mandatory file in a Civitai App Block. Published at https://civitai.com/schemas/app-block/v1.json. This is the single source of truth for the block manifest contract: the platform's server-side validator (src/server/services/block-manifest-validator.service.ts) and the `civitai` CLI both validate against these same rules. Set this URL as your manifest's `$schema` for editor validation.",
   "type": "object",
-  "required": [
-    "$schema",
-    "appId",
-    "blockId",
-    "version",
-    "name",
-    "type",
-    "targets",
-    "scopes",
-    "iframe",
-    "contentRating",
-    "minApiVersion"
-  ],
-  "additionalProperties": true,
+  "required": ["blockId", "version", "name", "contentRating", "scopes"],
   "properties": {
     "$schema": {
       "type": "string",
-      "const": "https://civitai.com/schemas/app-block/v1.json"
-    },
-    "appId": {
-      "type": "string",
-      "minLength": 1
+      "description": "Optional JSON-Schema reference; ignored by the platform validator."
     },
     "blockId": {
       "type": "string",
-      "pattern": "^[a-z0-9-]{3,64}$",
-      "description": "Immutable block identifier. Lowercase letters, digits, and hyphens; 3-64 characters."
+      "description": "The block slug. Becomes the canonical submission slug. Lowercase, starts with a letter, hyphen-separated, 3-40 chars.",
+      "minLength": 3,
+      "maxLength": 40,
+      "pattern": "^[a-z][a-z0-9-]*[a-z0-9]$"
     },
     "version": {
       "type": "string",
-      "pattern": "^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$",
-      "description": "Semver."
+      "description": "Semantic version (x.y.z, optional -prerelease).",
+      "minLength": 1,
+      "pattern": "^\\d+\\.\\d+\\.\\d+(-[0-9A-Za-z.-]+)?$"
     },
     "name": {
       "type": "string",
-      "minLength": 1,
-      "maxLength": 80
+      "description": "Human-readable display name. The server only requires a non-empty string (no length cap), so the CLI does not impose one either.",
+      "minLength": 1
     },
     "type": {
       "type": "string",
-      "enum": ["block", "embed"]
+      "description": "Free-form descriptor used by some examples (e.g. \"block\"). Not validated by the platform.",
+      "enum": ["block"]
     },
-    "targets": {
+    "contentRating": {
+      "type": "string",
+      "description": "Content rating of the app surface.",
+      "enum": ["g", "pg", "pg13", "r", "x"]
+    },
+    "renderMode": {
+      "type": "string",
+      "description": "How the block renders. Defaults to \"iframe\". \"inline\"/\"hybrid\" require a verified/internal trust tier (server-assigned), so authors should leave this as iframe.",
+      "enum": ["iframe", "inline", "hybrid"]
+    },
+    "trustTier": {
+      "type": "string",
+      "description": "SERVER-OWNED. Do NOT set this in your manifest — the platform assigns the trust tier during review. Present here only to reject dev-set values.",
+      "$comment": "Rejected via 'not' below.",
+      "enum": ["unverified", "verified", "internal"]
+    },
+    "scopes": {
       "type": "array",
-      "minItems": 1,
+      "description": "Capabilities the block requests. Must be a strict subset of what review grants. Each scope is lowercase colon-separated.",
       "items": {
-        "type": "object",
-        "required": ["slotId", "priority"],
-        "properties": {
-          "slotId": { "type": "string", "minLength": 1 },
-          "priority": { "type": "integer" },
-          "requiredContext": {
-            "type": "array",
-            "items": { "type": "string" }
-          }
-        }
+        "type": "string",
+        "enum": [
+          "models:read:self",
+          "media:read:owned",
+          "user:read:self",
+          "ai:write:budgeted",
+          "buzz:read:self",
+          "block:settings:read",
+          "block:settings:write",
+          "social:tip:self",
+          "apps:storage:read",
+          "apps:storage:write"
+        ]
       }
     },
-    "scopes": {
+    "minApiVersion": {
+      "type": "string",
+      "description": "Minimum App SDK API version the block targets (informational).",
+      "pattern": "^\\d+(\\.\\d+)*$"
+    },
+    "buildCommand": {
+      "type": "string",
+      "description": "Config-as-code: command the platform runs to build the static bundle (e.g. \"npm run build\"). Omit for no-build (static) apps. When set, outputDir must also be set.",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "outputDir": {
+      "type": "string",
+      "description": "Config-as-code: directory (relative to the project root) the buildCommand emits static files into (e.g. \"dist\"). Required when buildCommand is set.",
+      "minLength": 1,
+      "maxLength": 256,
+      "pattern": "^[^/].*"
+    },
+    "publicSettingsKeys": {
       "type": "array",
-      "minItems": 1,
+      "description": "Allowlist of settings keys exposed to anonymous viewers. Default (omitted) = none exposed.",
+      "maxItems": 32,
       "items": {
         "type": "string",
-        "pattern": "^[a-z]+:[a-z]+:[a-z]+$",
-        "description": "Colon-separated lowercase, e.g. models:read:self. PascalCase is rejected."
+        "minLength": 1,
+        "maxLength": 64
       }
     },
+    "assetBundleUrl": {
+      "type": "string",
+      "description": "Optional v2 surface — HTTPS URL to a hosted asset bundle. Must be a public https URL.",
+      "format": "uri",
+      "pattern": "^https://"
+    },
     "iframe": {
       "type": "object",
-      "required": ["src", "minHeight", "resizable", "sandbox"],
+      "description": "iframe envelope. NOTE: iframe.src is SERVER-OWNED — do NOT set it; the platform stamps the canonical bundle URL during build/approve.",
+      "additionalProperties": false,
       "properties": {
         "src": {
-          "type": "string",
-          "description": "HTTPS URL of the block app. http://localhost or http://127.0.0.1 also accepted for local dev."
+          "description": "SERVER-OWNED. Do NOT set iframe.src — the platform assigns it. Present here only so the schema can reject dev-set values.",
+          "$comment": "Rejected via 'not' below."
+        },
+        "minHeight": {
+          "type": "integer",
+          "description": "Minimum iframe height in px.",
+          "minimum": 40,
+          "maximum": 4000
+        },
+        "maxHeight": {
+          "description": "Maximum iframe height in px, or null for unbounded.",
+          "type": ["integer", "null"],
+          "minimum": 40,
+          "maximum": 4000
+        },
+        "resizable": {
+          "type": "boolean",
+          "description": "Whether the host honours RESIZE_IFRAME messages."
         },
-        "minHeight": { "type": "integer", "exclusiveMinimum": 0 },
-        "maxHeight": { "type": ["integer", "null"] },
-        "resizable": { "type": "boolean" },
         "sandbox": {
           "type": "string",
-          "allOf": [
-            {
-              "not": { "pattern": "(^|\\s)allow-same-origin(\\s|$)" },
-              "description": "Must not contain allow-same-origin — combined with allow-scripts it defeats the sandbox."
-            },
-            {
-              "not": { "pattern": "(^|\\s)allow-top-navigation(\\s|$)" },
-              "description": "Must not contain allow-top-navigation — use the NAVIGATE postMessage instead."
-            },
-            {
-              "not": { "pattern": "(^|\\s)allow-top-navigation-by-user-activation(\\s|$)" },
-              "description": "Must not contain allow-top-navigation-by-user-activation — same threat as allow-top-navigation, gated on a user gesture."
-            },
-            {
-              "not": { "pattern": "(^|\\s)allow-top-navigation-to-custom-protocols(\\s|$)" },
-              "description": "Must not contain allow-top-navigation-to-custom-protocols — same threat as allow-top-navigation, restricted to non-fetch schemes."
-            }
-          ]
+          "description": "Space-separated iframe sandbox tokens. Unverified tier allows only: allow-scripts, allow-forms. Never combine allow-same-origin with allow-scripts.",
+          "minLength": 1
         }
       }
     },
-    "assets": {
-      "type": "array",
-      "items": {
-        "type": "object",
-        "required": ["url", "integrity"],
-        "properties": {
-          "url": { "type": "string" },
-          "integrity": {
-            "type": "string",
-            "pattern": "^sha(256|384|512)-[A-Za-z0-9+/=]+$"
-          }
+    "page": {
+      "type": "object",
+      "description": "Full-page surface descriptor (W10). Page apps mount at /apps/run/<slug>.",
+      "additionalProperties": false,
+      "required": ["path", "title"],
+      "properties": {
+        "path": {
+          "type": "string",
+          "description": "Sub-path the page mounts at; must start with '/'.",
+          "minLength": 1,
+          "maxLength": 256,
+          "pattern": "^/"
+        },
+        "title": {
+          "type": "string",
+          "description": "Title shown in host chrome.",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "icon": {
+          "type": "string",
+          "description": "Optional icon name.",
+          "maxLength": 128
+        },
+        "buzzBudgetPerGen": {
+          "type": "integer",
+          "description": "Optional per-generation Buzz budget for ai:write:budgeted tokens. Positive integer; server-clamped to the per-gen cap.",
+          "exclusiveMinimum": 0
         }
       }
     },
-    "settings": {
+    "targets": {
       "type": "array",
+      "description": "Model-page slot targets. Each target's slotId must be a known registered model slot (not the page slot). Optional for page-only apps.",
+      "maxItems": 16,
       "items": {
         "type": "object",
-        "required": ["id", "type", "label"],
+        "required": ["slotId"],
         "properties": {
-          "id": { "type": "string", "minLength": 1 },
-          "type": { "type": "string", "enum": ["string", "number", "boolean", "select"] },
-          "label": { "type": "string", "minLength": 1 },
-          "default": {},
-          "options": {
-            "type": "array",
-            "items": {
-              "type": "object",
-              "required": ["value", "label"],
-              "properties": {
-                "value": { "type": "string" },
-                "label": { "type": "string" }
-              }
-            }
-          },
-          "min": { "type": "number" },
-          "max": { "type": "number" },
-          "required": { "type": "boolean" }
-        }
-      }
-    },
-    "contentRating": {
-      "type": "string",
-      "enum": ["g", "pg", "pg13", "r", "x"]
-    },
-    "preview": {
-      "type": "object",
-      "required": ["thumbnail", "description"],
-      "properties": {
-        "thumbnail": { "type": "string" },
-        "description": { "type": "string" },
-        "screenshots": {
-          "type": "array",
-          "items": { "type": "string" }
+          "slotId": {
+            "type": "string",
+            "minLength": 1
+          }
         }
       }
-    },
-    "promotionEligible": { "type": "boolean" },
-    "minApiVersion": { "type": "string" },
-    "renderMode": {
-      "type": "string",
-      "enum": ["iframe", "inline", "hybrid"],
-      "description": "Optional. Defaults to iframe. v1 manifests may omit."
-    },
-    "assetBundle": {
-      "type": "object",
-      "properties": {
-        "url": { "type": ["string", "null"] },
-        "sha256": { "type": ["string", "null"] }
+    }
+  },
+  "allOf": [
+    {
+      "$comment": "outputDir is required whenever buildCommand is set. NOTE: the server-owned iframe.src and trustTier fields are rejected by the platform validator (and the CLI in Go) with clearer error messages than JSON Schema's `not`; they are declared in `properties` above only so the schema documents them.",
+      "if": {
+        "required": ["buildCommand"]
+      },
+      "then": {
+        "required": ["outputDir"]
       }
-    },
-    "trustTier": {
-      "type": "string",
-      "enum": ["unverified", "verified", "internal"]
     }
-  }
+  ]
 }