@civitai/app-sdk 0.46.0 → 0.48.0

package/dist/manifest/defineBlock.d.ts

@@ -0,0 +1,145 @@
+/**
+ * Build-time validation for a `block.manifest.json`, DERIVED FROM THE CANONICAL
+ * SCHEMA rather than hand-mirrored.
+ *
+ * WHY IT IS SHAPED THIS WAY. #330's proposed fix, item 1, verbatim: "Derive the
+ * rules from the schema, not by hand. […] A hand-written mirror of an external
+ * schema regenerates this bug every time the schema moves." The previous
+ * implementation was that hand-written mirror — 11 required fields against the
+ * canonical's 5, `appId` required though the canonical does not declare it, and
+ * `iframe.src` required though the platform REFUSES it. It rejected all seven
+ * `block.manifest.json` files this repo ships.
+ *
+ * So the machine-checkable rules are not written down here at all. They are
+ * read from `schemas/app-block/v1.json` — a byte-identical vendored copy of
+ * https://civitai.com/schemas/app-block/v1.json, kept in lockstep by
+ * `scripts/check-canonical-schema.sh` (CI job `schema-drift`) — and compiled
+ * with Ajv. Every `required`, `enum`, `pattern`, bound, `additionalProperties`
+ * and `allOf` in the canonical is therefore enforced here for free, and moves
+ * when the canonical moves.
+ *
+ * WHY THIS SUBPATH IS NODE-ONLY. Reading the schema needs `node:fs`, and Ajv is
+ * a runtime dependency. `@civitai/app-sdk`'s `dependencies` are empty on purpose
+ * — it ships into sandboxed browser iframes and every app inherits its install
+ * graph — so Ajv is an OPTIONAL PEER (the `@civitai/client` precedent) consumed
+ * only from `@civitai/app-sdk/manifest` and `@civitai/app-sdk/vite`. The only
+ * real caller is the Vite plugin, which runs in Node at build time. The
+ * browser-facing `./blocks` subpath keeps zero runtime dependencies.
+ *
+ * THE CLAIM YOU CAN CHECK:
+ *
+ *   1. `defineBlock` REJECTS everything the canonical schema rejects. This holds
+ *      BY CONSTRUCTION, not by a fixture corpus: Ajv runs first and any error it
+ *      reports is thrown. There is no relaxation carve-out anywhere below.
+ *   2. Beyond that it rejects exactly the rules in {@link SCHEMA_DIVERGENCES} —
+ *      each one a server rejection the canonical states only in PROSE, each
+ *      carrying the prose it mirrors.
+ *   3. Nothing else.
+ *
+ * PASSING IS NECESSARY, NOT SUFFICIENT for `civitai app submit` — see
+ * {@link KNOWN_GAPS}. And it is not a replacement for `civitai app validate`,
+ * the Go CLI's own local pre-check; this exists so a mistake surfaces during
+ * `pnpm dev` / `pnpm build` rather than at submit time.
+ */
+import type { BlockManifest } from '../blocks/types.js';
+/**
+ * Rules `defineBlock` applies that the canonical schema does NOT express in
+ * machine-checkable form.
+ *
+ * EVERY ENTRY IS STRICTLY ADDITIVE — it can only ever REJECT a manifest Ajv
+ * accepted. None of them relaxes a canonical rule. That is what makes claim (1)
+ * in the module docblock structural rather than a promise, and it is asserted
+ * per-entry by `test/manifest/divergences.test.ts`: each entry must name a
+ * fixture the canonical schema ACCEPTS and `defineBlock` REJECTS on that
+ * entry's own field path. An entry with no such fixture fails the suite.
+ *
+ * Each `canonical` field quotes the schema text the rule mirrors, so the next
+ * person can check the mirror against its source without leaving this file.
+ */
+export declare const SCHEMA_DIVERGENCES: {
+    readonly 'iframe.src': {
+        readonly rule: "REJECTED when present.";
+        readonly canonical: string;
+        readonly reason: string;
+    };
+    readonly trustTier: {
+        readonly rule: "REJECTED when present.";
+        readonly canonical: string;
+        readonly reason: "Mirrors a server rejection the canonical states in prose.";
+    };
+    readonly 'iframe.sandbox': {
+        readonly rule: "Rejects `allow-same-origin` and every `allow-top-navigation*` token.";
+        readonly canonical: string;
+        readonly reason: string;
+    };
+    readonly scopeJustifications: {
+        readonly rule: "Every key must name a scope also present in `scopes`.";
+        readonly canonical: string;
+        readonly reason: string;
+    };
+    readonly settings: {
+        readonly rule: "Validated against the W3 settings meta-schema (scope/type/label/description, snake_case keys, max 32).";
+        readonly canonical: "Not a declared property. The canonical top level is not `additionalProperties: false`, so it passes.";
+        readonly reason: string;
+    };
+};
+/**
+ * Rules the server applies that `defineBlock` deliberately does NOT — stated so
+ * nobody reads a green `defineBlock` as "submit will succeed". Run
+ * `civitai app validate` (the Go CLI) before `civitai app submit`; it checks
+ * against the same canonical and knows things this cannot.
+ */
+export declare const KNOWN_GAPS: {
+    readonly 'scopeJustifications-required-for-sensitive-scopes': string;
+    readonly 'repository-per-segment-rules': string;
+    readonly 'tier-dependent-sandbox-allowlist': string;
+    readonly 'review-granted-scope-subset': "Which of the requested `scopes` review actually grants has no schema expression at all.";
+    readonly 'slotId-registry': string;
+    readonly 'settings-meta-schema-not-vendored': string;
+    readonly 'format-uri-not-enforced': string;
+};
+/** The canonical schema object, parsed once. Exported for tests and tooling. */
+export declare function loadCanonicalSchema(): Record<string, unknown>;
+export interface DefineBlockConfig {
+    manifest: BlockManifest;
+}
+/**
+ * Validates the manifest against the canonical schema and returns it unchanged.
+ * Acts as a typed identity function — call it from the build (see
+ * `@civitai/app-sdk/vite`) so violations throw before anything ships. Throws
+ * {@link BlockManifestError} (with a `.field` dot-path).
+ *
+ * Enforces every rule the canonical `block.manifest.json` schema expresses,
+ * plus the prose-only server rejections in {@link SCHEMA_DIVERGENCES}. See
+ * {@link KNOWN_GAPS} for what only the server can check.
+ *
+ * The example below is kept byte-identical to `test/manifest/defineBlock.example.ts`,
+ * which is compiled and executed by the suite — a guard fails if they drift, so
+ * this snippet both type-checks and runs.
+ *
+ * @example
+ * import { defineBlock } from '@civitai/app-sdk/manifest';
+ *
+ * export const manifest = defineBlock({
+ *   manifest: {
+ *     $schema: 'https://civitai.com/schemas/app-block/v1.json',
+ *     blockId: 'my-block',
+ *     version: '0.1.0',
+ *     name: 'My Block',
+ *     type: 'block',
+ *     targets: [{ slotId: 'model.sidebar_top', priority: 100 }],
+ *     scopes: ['models:read:self'],
+ *     // NOTE: no `iframe.src` — the platform stamps it at build/approve time.
+ *     iframe: {
+ *       minHeight: 200,
+ *       maxHeight: 600,
+ *       resizable: true,
+ *       sandbox: 'allow-scripts allow-forms',
+ *     },
+ *     contentRating: 'pg',
+ *     minApiVersion: '1.0',
+ *   },
+ * });
+ */
+export declare function defineBlock(config: DefineBlockConfig): BlockManifest;
+//# sourceMappingURL=defineBlock.d.ts.map

package/dist/manifest/defineBlock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defineBlock.d.ts","sourceRoot":"","sources":["../../src/manifest/defineBlock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAQH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;CAgErB,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,UAAU;;;;;;;;CA8Bb,CAAC;AAUX,gFAAgF;AAChF,wBAAgB,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE7D;AAmFD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,aAAa,CAAC;CAIzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,CA0BpE"}

package/dist/manifest/defineBlock.js

@@ -0,0 +1,390 @@
+/**
+ * Build-time validation for a `block.manifest.json`, DERIVED FROM THE CANONICAL
+ * SCHEMA rather than hand-mirrored.
+ *
+ * WHY IT IS SHAPED THIS WAY. #330's proposed fix, item 1, verbatim: "Derive the
+ * rules from the schema, not by hand. […] A hand-written mirror of an external
+ * schema regenerates this bug every time the schema moves." The previous
+ * implementation was that hand-written mirror — 11 required fields against the
+ * canonical's 5, `appId` required though the canonical does not declare it, and
+ * `iframe.src` required though the platform REFUSES it. It rejected all seven
+ * `block.manifest.json` files this repo ships.
+ *
+ * So the machine-checkable rules are not written down here at all. They are
+ * read from `schemas/app-block/v1.json` — a byte-identical vendored copy of
+ * https://civitai.com/schemas/app-block/v1.json, kept in lockstep by
+ * `scripts/check-canonical-schema.sh` (CI job `schema-drift`) — and compiled
+ * with Ajv. Every `required`, `enum`, `pattern`, bound, `additionalProperties`
+ * and `allOf` in the canonical is therefore enforced here for free, and moves
+ * when the canonical moves.
+ *
+ * WHY THIS SUBPATH IS NODE-ONLY. Reading the schema needs `node:fs`, and Ajv is
+ * a runtime dependency. `@civitai/app-sdk`'s `dependencies` are empty on purpose
+ * — it ships into sandboxed browser iframes and every app inherits its install
+ * graph — so Ajv is an OPTIONAL PEER (the `@civitai/client` precedent) consumed
+ * only from `@civitai/app-sdk/manifest` and `@civitai/app-sdk/vite`. The only
+ * real caller is the Vite plugin, which runs in Node at build time. The
+ * browser-facing `./blocks` subpath keeps zero runtime dependencies.
+ *
+ * THE CLAIM YOU CAN CHECK:
+ *
+ *   1. `defineBlock` REJECTS everything the canonical schema rejects. This holds
+ *      BY CONSTRUCTION, not by a fixture corpus: Ajv runs first and any error it
+ *      reports is thrown. There is no relaxation carve-out anywhere below.
+ *   2. Beyond that it rejects exactly the rules in {@link SCHEMA_DIVERGENCES} —
+ *      each one a server rejection the canonical states only in PROSE, each
+ *      carrying the prose it mirrors.
+ *   3. Nothing else.
+ *
+ * PASSING IS NECESSARY, NOT SUFFICIENT for `civitai app submit` — see
+ * {@link KNOWN_GAPS}. And it is not a replacement for `civitai app validate`,
+ * the Go CLI's own local pre-check; this exists so a mistake surfaces during
+ * `pnpm dev` / `pnpm build` rather than at submit time.
+ */
+import { readFileSync } from 'node:fs';
+import Ajv2020 from 'ajv/dist/2020.js';
+import { BlockManifestError } from '../blocks/manifestError.js';
+import { BLOCK_SCOPES } from '../blocks/scopes.js';
+/**
+ * Rules `defineBlock` applies that the canonical schema does NOT express in
+ * machine-checkable form.
+ *
+ * EVERY ENTRY IS STRICTLY ADDITIVE — it can only ever REJECT a manifest Ajv
+ * accepted. None of them relaxes a canonical rule. That is what makes claim (1)
+ * in the module docblock structural rather than a promise, and it is asserted
+ * per-entry by `test/manifest/divergences.test.ts`: each entry must name a
+ * fixture the canonical schema ACCEPTS and `defineBlock` REJECTS on that
+ * entry's own field path. An entry with no such fixture fails the suite.
+ *
+ * Each `canonical` field quotes the schema text the rule mirrors, so the next
+ * person can check the mirror against its source without leaving this file.
+ */
+export const SCHEMA_DIVERGENCES = {
+    'iframe.src': {
+        rule: 'REJECTED when present.',
+        canonical: 'Declared under `iframe.properties` with the description "SERVER-OWNED. Do NOT set ' +
+            "iframe.src — the platform assigns it. Present here only so the schema can reject dev-set " +
+            'values." The JSON-Schema `not` is deliberately absent; the top-level `allOf` $comment says ' +
+            'the platform validator and the Go CLI reject it "with clearer error messages than JSON ' +
+            "Schema's `not`\".",
+        reason: 'Mirrors a server rejection the canonical states in prose and deliberately does not encode. ' +
+            'This is the #330 headline inverted: the old validator REQUIRED `iframe.src`, demanding the ' +
+            'exact value submit refuses.',
+    },
+    trustTier: {
+        rule: 'REJECTED when present.',
+        canonical: 'Declared with the description "SERVER-OWNED. Do NOT set this in your manifest — the ' +
+            'platform assigns the trust tier during review. Present here only to reject dev-set values." ' +
+            'Same deliberately-absent `not` as `iframe.src`, per the same `allOf` $comment.',
+        reason: 'Mirrors a server rejection the canonical states in prose.',
+    },
+    'iframe.sandbox': {
+        rule: 'Rejects `allow-same-origin` and every `allow-top-navigation*` token.',
+        canonical: 'Only `minLength: 1`. The description carries two separate prose rules: a TIER ALLOWLIST ' +
+            '("Unverified tier allows only: allow-scripts, allow-forms") and a flat prohibition ' +
+            '("Never combine allow-same-origin with allow-scripts").',
+        reason: 'Mirrors the flat prohibition, plus top-navigation (including the -by-user-activation and ' +
+            '-to-custom-protocols variants), which lets a block navigate the host frame instead of ' +
+            'routing through the NAVIGATE postMessage. ' +
+            '🔴 THE TIER ALLOWLIST IS DELIBERATELY NOT MIRRORED, AND THAT MAKES THIS GATE LOOSER THAN ' +
+            'REVIEW IN THE OTHER DIRECTION: `allow-popups`, `allow-modals`, `allow-downloads` and any ' +
+            'other token outside {allow-scripts, allow-forms} PASS HERE and may be refused at review. ' +
+            'They are not rejected because the tier is assigned server-side during review and is ' +
+            'unknowable locally — `starters/civitai-block-starter` itself ships ' +
+            '"allow-scripts allow-forms allow-popups allow-popups-to-escape-sandbox". See ' +
+            'KNOWN_GAPS["tier-dependent-sandbox-allowlist"].',
+    },
+    scopeJustifications: {
+        rule: 'Every key must name a scope also present in `scopes`.',
+        canonical: '`additionalProperties: { type: string, minLength: 1, maxLength: 500 }` — any key passes. ' +
+            'The canonical says so itself: "The requirement is enforced imperatively by the manifest ' +
+            'validator (not expressed as JSON-Schema conditionals here)."',
+        reason: 'Mirrors a server rejection the canonical states in prose. The OTHER half of that server ' +
+            'rule — justifications being REQUIRED for sensitive scopes — is NOT mirrored; see ' +
+            'KNOWN_GAPS["scopeJustifications-required-for-sensitive-scopes"].',
+    },
+    settings: {
+        rule: 'Validated against the W3 settings meta-schema (scope/type/label/description, snake_case keys, max 32).',
+        canonical: 'Not a declared property. The canonical top level is not `additionalProperties: false`, so it passes.',
+        reason: "Manifest settings ARE validated server-side, by civitai/civitai's " +
+            '`manifest-settings.meta.schema.ts` rather than by the app-block schema, and two of the ' +
+            'seven shipped manifests declare `settings`. ' +
+            '🔴 THIS IS THE ONE REMAINING HAND-WRITTEN MIRROR OF AN EXTERNAL SCHEMA IN THIS FILE, i.e. ' +
+            'exactly the construct #330 was filed about — it is here only because that meta-schema is ' +
+            'NOT published at a URL and NOT vendored, so there is nothing to derive from. The fix is ' +
+            'upstream: publish it and vendor it beside `app-block/v1.json` with the same drift-check, ' +
+            'then delete this. See KNOWN_GAPS["settings-meta-schema-not-vendored"].',
+    },
+};
+/**
+ * Rules the server applies that `defineBlock` deliberately does NOT — stated so
+ * nobody reads a green `defineBlock` as "submit will succeed". Run
+ * `civitai app validate` (the Go CLI) before `civitai app submit`; it checks
+ * against the same canonical and knows things this cannot.
+ */
+export const KNOWN_GAPS = {
+    'scopeJustifications-required-for-sensitive-scopes': 'The canonical names the sensitive scope set only in a prose description, not in a ' +
+        'machine-readable form. Hand-mirroring that list would regenerate the #330 drift bug, so ' +
+        'only the SHAPE is checked here (keys must be declared scopes; the canonical checks the ' +
+        '1..500-char values). The requirement itself is server-side.',
+    'repository-per-segment-rules': 'The canonical\'s `repository` pattern is documented as "a coarse SHAPE check and NOT the ' +
+        'whole rule"; the server additionally constrains each path segment. Ajv enforces the ' +
+        'canonical pattern exactly, and is therefore necessary-not-sufficient BY THE CANONICAL\'S ' +
+        'OWN DESIGN.',
+    'tier-dependent-sandbox-allowlist': 'The canonical\'s sandbox description is an ALLOWLIST ("Unverified tier allows only: ' +
+        'allow-scripts, allow-forms"), but the tier is assigned server-side during review, so the ' +
+        'applicable allowlist is unknowable at build time. Tokens outside that set pass here and may ' +
+        'be refused at review. See SCHEMA_DIVERGENCES["iframe.sandbox"].',
+    'review-granted-scope-subset': 'Which of the requested `scopes` review actually grants has no schema expression at all.',
+    'slotId-registry': 'Whether a `targets[].slotId` names a slot the host has registered has no schema expression; ' +
+        'the canonical only requires a non-empty string.',
+    'settings-meta-schema-not-vendored': "civitai/civitai's `manifest-settings.meta.schema.ts` is not published at a URL and not " +
+        'vendored here, so `settings` is the one surface still checked by a hand-written mirror. ' +
+        'See SCHEMA_DIVERGENCES.settings.',
+    'format-uri-not-enforced': '`assetBundleUrl` carries `format: "uri"` in addition to `pattern: "^https://"`. Ajv ignores ' +
+        'unknown formats unless `ajv-formats` is installed, which would be a second optional peer for ' +
+        'one field whose pattern is already enforced. The pattern IS enforced; the `uri` format is ' +
+        'not, so a value like "https://" passes here.',
+};
+/**
+ * The vendored canonical, resolved relative to THIS module so the same
+ * specifier works from `src/` (vitest) and from `dist/` (published):
+ * `src/manifest/` -> `../../schemas/`, `dist/manifest/` -> `../../schemas/`.
+ * `schemas` is in package.json `files`, so it ships.
+ */
+const CANONICAL_SCHEMA_PATH = new URL('../../schemas/app-block/v1.json', import.meta.url);
+/** The canonical schema object, parsed once. Exported for tests and tooling. */
+export function loadCanonicalSchema() {
+    return JSON.parse(readFileSync(CANONICAL_SCHEMA_PATH, 'utf8'));
+}
+let compiled;
+function canonicalValidator() {
+    if (compiled)
+        return compiled;
+    // `strict: false` because the canonical uses `$comment` and a `format` Ajv
+    // does not know (see KNOWN_GAPS['format-uri-not-enforced']); strict mode would
+    // turn those into compile-time throws over a schema this package does not own
+    // and must not edit.
+    //
+    // `logger: false` because that same unknown format makes Ajv log
+    // `unknown format "uri" ignored…` to the console AT COMPILE TIME — which, via
+    // the Vite plugin, would print on every `pnpm dev` and `pnpm build` in every
+    // scaffold. The gap is recorded in KNOWN_GAPS, not shouted at the author on
+    // every boot. NOTE this silences Ajv's own diagnostics only; validation
+    // errors are returned in `validate.errors`, never logged.
+    const ajv = new Ajv2020({ allErrors: true, strict: false, logger: false });
+    compiled = ajv.compile(loadCanonicalSchema());
+    return compiled;
+}
+/** `/iframe/minHeight` -> `iframe.minHeight`; `/targets/0/slotId` -> `targets[0].slotId`. */
+function toDotPath(instancePath) {
+    if (instancePath === '')
+        return '';
+    return instancePath
+        .slice(1)
+        .split('/')
+        .reduce((acc, segment) => {
+        // JSON Pointer escapes: ~1 is '/', ~0 is '~'.
+        const key = segment.replace(/~1/g, '/').replace(/~0/g, '~');
+        if (/^\d+$/.test(key))
+            return `${acc}[${key}]`;
+        return acc === '' ? key : `${acc}.${key}`;
+    }, '');
+}
+const PASCAL_CASE_PATTERN = /^[A-Z][A-Za-z0-9]*$/;
+/**
+ * Turns the FIRST Ajv error into a `BlockManifestError`. Ajv's own wording is
+ * kept (it is derived from the schema, so it cannot drift); only the field path
+ * is reshaped, and one case gets an extra hint because it is the mistake the
+ * docs see most.
+ */
+function toManifestError(error, manifest) {
+    const base = toDotPath(error.instancePath);
+    if (error.keyword === 'required') {
+        const missing = error.params.missingProperty;
+        const field = base === '' ? missing : `${base}.${missing}`;
+        return new BlockManifestError(`manifest.${field} is required`, field);
+    }
+    const field = base;
+    const shown = field === '' ? 'manifest' : `manifest.${field}`;
+    let message = `${shown} ${error.message ?? 'is invalid'}`;
+    if (error.keyword === 'enum') {
+        const allowed = error.params.allowedValues;
+        if (allowed)
+            message += ` (${allowed.map((v) => JSON.stringify(v)).join(', ')})`;
+    }
+    if (error.keyword === 'additionalProperties') {
+        const extra = error.params.additionalProperty;
+        message = `${shown}.${extra} is not a known property here`;
+        return new BlockManifestError(message, field === '' ? extra : `${field}.${extra}`);
+    }
+    // The one hint worth adding: block scopes are colon-separated lowercase, and
+    // the OAuth scopes elsewhere in this SDK are PascalCase bitmask names, so
+    // authors reach for the wrong spelling.
+    if (/^scopes\[\d+\]$/.test(field)) {
+        const index = Number(field.slice(field.indexOf('[') + 1, -1));
+        const value = manifest?.scopes?.[index];
+        if (typeof value === 'string' && PASCAL_CASE_PATTERN.test(value)) {
+            message +=
+                '. Block scope strings are colon-separated lowercase (e.g. "models:read:self"), ' +
+                    'not the PascalCase OAuth bitmask names';
+        }
+        message += `. Must be one of: ${Object.values(BLOCK_SCOPES).join(', ')}`;
+    }
+    return new BlockManifestError(message, field);
+}
+/**
+ * Validates the manifest against the canonical schema and returns it unchanged.
+ * Acts as a typed identity function — call it from the build (see
+ * `@civitai/app-sdk/vite`) so violations throw before anything ships. Throws
+ * {@link BlockManifestError} (with a `.field` dot-path).
+ *
+ * Enforces every rule the canonical `block.manifest.json` schema expresses,
+ * plus the prose-only server rejections in {@link SCHEMA_DIVERGENCES}. See
+ * {@link KNOWN_GAPS} for what only the server can check.
+ *
+ * The example below is kept byte-identical to `test/manifest/defineBlock.example.ts`,
+ * which is compiled and executed by the suite — a guard fails if they drift, so
+ * this snippet both type-checks and runs.
+ *
+ * @example
+ * import { defineBlock } from '@civitai/app-sdk/manifest';
+ *
+ * export const manifest = defineBlock({
+ *   manifest: {
+ *     $schema: 'https://civitai.com/schemas/app-block/v1.json',
+ *     blockId: 'my-block',
+ *     version: '0.1.0',
+ *     name: 'My Block',
+ *     type: 'block',
+ *     targets: [{ slotId: 'model.sidebar_top', priority: 100 }],
+ *     scopes: ['models:read:self'],
+ *     // NOTE: no `iframe.src` — the platform stamps it at build/approve time.
+ *     iframe: {
+ *       minHeight: 200,
+ *       maxHeight: 600,
+ *       resizable: true,
+ *       sandbox: 'allow-scripts allow-forms',
+ *     },
+ *     contentRating: 'pg',
+ *     minApiVersion: '1.0',
+ *   },
+ * });
+ */
+export function defineBlock(config) {
+    const { manifest } = config;
+    if (manifest == null || typeof manifest !== 'object' || Array.isArray(manifest)) {
+        throw new BlockManifestError('manifest must be an object');
+    }
+    // (1) Everything the canonical expresses. No carve-outs, no suppression:
+    // whatever Ajv rejects, this rejects.
+    const validate = canonicalValidator();
+    if (!validate(manifest)) {
+        const errors = validate.errors ?? [];
+        const first = errors[0];
+        /* c8 ignore next */
+        if (!first)
+            throw new BlockManifestError('manifest failed schema validation');
+        throw toManifestError(first, manifest);
+    }
+    // (2) The prose-only server rejections. Strictly additive, one per
+    // SCHEMA_DIVERGENCES entry, in the table's order.
+    rejectServerOwned(manifest);
+    rejectDangerousSandboxTokens(manifest);
+    rejectUndeclaredScopeJustifications(manifest);
+    if (manifest.settings !== undefined)
+        validateSettings(manifest.settings);
+    return manifest;
+}
+const SERVER_OWNED_MESSAGE = 'is SERVER-OWNED — the platform assigns it during build/approve. Remove it from the manifest.';
+/** SCHEMA_DIVERGENCES['iframe.src'] and SCHEMA_DIVERGENCES.trustTier. */
+function rejectServerOwned(manifest) {
+    if (manifest.trustTier !== undefined) {
+        throw new BlockManifestError(`manifest.trustTier ${SERVER_OWNED_MESSAGE}`, 'trustTier');
+    }
+    const iframe = manifest.iframe;
+    if (iframe != null && iframe.src !== undefined) {
+        throw new BlockManifestError(`manifest.iframe.src ${SERVER_OWNED_MESSAGE}`, 'iframe.src');
+    }
+}
+/**
+ * SCHEMA_DIVERGENCES['iframe.sandbox']. A DENYLIST, not the canonical's tier
+ * allowlist — see that entry and KNOWN_GAPS['tier-dependent-sandbox-allowlist']
+ * for why, and for what therefore passes here and fails at review.
+ */
+const BANNED_SANDBOX_TOKENS = new Set([
+    'allow-same-origin',
+    'allow-top-navigation',
+    'allow-top-navigation-by-user-activation',
+    'allow-top-navigation-to-custom-protocols',
+]);
+function rejectDangerousSandboxTokens(manifest) {
+    const sandbox = manifest.iframe?.sandbox;
+    if (typeof sandbox !== 'string')
+        return;
+    const tokens = new Set(sandbox.split(/\s+/).filter(Boolean));
+    for (const banned of BANNED_SANDBOX_TOKENS) {
+        if (tokens.has(banned)) {
+            throw new BlockManifestError(`manifest.iframe.sandbox must not contain "${banned}". ` +
+                (banned === 'allow-same-origin'
+                    ? 'Combined with "allow-scripts" it defeats the sandbox entirely.'
+                    : 'Blocks must route navigation through the NAVIGATE postMessage so the host can mediate.'), 'iframe.sandbox');
+        }
+    }
+}
+/** SCHEMA_DIVERGENCES.scopeJustifications. */
+function rejectUndeclaredScopeJustifications(manifest) {
+    const justifications = manifest.scopeJustifications;
+    if (justifications == null)
+        return;
+    const declared = new Set(manifest.scopes ?? []);
+    for (const scope of Object.keys(justifications)) {
+        if (!declared.has(scope)) {
+            const path = `scopeJustifications.${scope}`;
+            throw new BlockManifestError(`manifest.${path} justifies a scope that is not in manifest.scopes. ` +
+                'Every justification key must be a scope the manifest actually requests.', path);
+        }
+    }
+}
+/**
+ * SCHEMA_DIVERGENCES.settings — the one hand-written mirror left, of
+ * civitai/civitai's `manifest-settings.meta.schema.ts`. Keep both sides aligned
+ * until that meta-schema is published and vendored; see
+ * KNOWN_GAPS['settings-meta-schema-not-vendored'].
+ */
+const SETTING_TYPES = ['number', 'string', 'boolean'];
+const SETTING_SCOPES = ['publisher', 'viewer'];
+const SETTING_KEY_PATTERN = /^[a-z][a-z0-9_]{0,40}$/;
+const MAX_SETTINGS_PER_BLOCK = 32;
+function validateSettings(settings) {
+    if (settings == null || typeof settings !== 'object' || Array.isArray(settings)) {
+        throw new BlockManifestError('manifest.settings must be an object (record keyed by snake_case field name)', 'settings');
+    }
+    const entries = Object.entries(settings);
+    if (entries.length > MAX_SETTINGS_PER_BLOCK) {
+        throw new BlockManifestError(`manifest.settings has ${entries.length} entries (max ${MAX_SETTINGS_PER_BLOCK})`, 'settings');
+    }
+    for (const [key, raw] of entries) {
+        const path = `settings.${key}`;
+        if (!SETTING_KEY_PATTERN.test(key)) {
+            throw new BlockManifestError(`manifest.${path}: key must match ${SETTING_KEY_PATTERN} (snake_case, must start with a letter)`, path);
+        }
+        if (raw == null || typeof raw !== 'object') {
+            throw new BlockManifestError(`manifest.${path} must be an object`, path);
+        }
+        const s = raw;
+        if (typeof s.scope !== 'string' || !SETTING_SCOPES.includes(s.scope)) {
+            throw new BlockManifestError(`manifest.${path}.scope must be one of ${SETTING_SCOPES.join(', ')}. Got: ${JSON.stringify(s.scope)}`, `${path}.scope`);
+        }
+        if (typeof s.type !== 'string' || !SETTING_TYPES.includes(s.type)) {
+            throw new BlockManifestError(`manifest.${path}.type must be one of ${SETTING_TYPES.join(', ')}. Got: ${JSON.stringify(s.type)}`, `${path}.type`);
+        }
+        if (typeof s.label !== 'string' || s.label.length === 0) {
+            throw new BlockManifestError(`manifest.${path}.label must be a non-empty string`, `${path}.label`);
+        }
+        if (typeof s.description !== 'string' || s.description.length === 0) {
+            throw new BlockManifestError(`manifest.${path}.description must be a non-empty string`, `${path}.description`);
+        }
+    }
+}
+//# sourceMappingURL=defineBlock.js.map

package/dist/manifest/defineBlock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defineBlock.js","sourceRoot":"","sources":["../../src/manifest/defineBlock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,OAAoD,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGnD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY,EAAE;QACZ,IAAI,EAAE,wBAAwB;QAC9B,SAAS,EACP,oFAAoF;YACpF,2FAA2F;YAC3F,6FAA6F;YAC7F,yFAAyF;YACzF,mBAAmB;QACrB,MAAM,EACJ,6FAA6F;YAC7F,6FAA6F;YAC7F,6BAA6B;KAChC;IACD,SAAS,EAAE;QACT,IAAI,EAAE,wBAAwB;QAC9B,SAAS,EACP,sFAAsF;YACtF,8FAA8F;YAC9F,gFAAgF;QAClF,MAAM,EAAE,2DAA2D;KACpE;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,sEAAsE;QAC5E,SAAS,EACP,0FAA0F;YAC1F,qFAAqF;YACrF,yDAAyD;QAC3D,MAAM,EACJ,2FAA2F;YAC3F,wFAAwF;YACxF,4CAA4C;YAC5C,2FAA2F;YAC3F,2FAA2F;YAC3F,2FAA2F;YAC3F,sFAAsF;YACtF,qEAAqE;YACrE,+EAA+E;YAC/E,iDAAiD;KACpD;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,uDAAuD;QAC7D,SAAS,EACP,2FAA2F;YAC3F,0FAA0F;YAC1F,8DAA8D;QAChE,MAAM,EACJ,0FAA0F;YAC1F,mFAAmF;YACnF,kEAAkE;KACrE;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,wGAAwG;QAC9G,SAAS,EAAE,sGAAsG;QACjH,MAAM,EACJ,oEAAoE;YACpE,yFAAyF;YACzF,8CAA8C;YAC9C,4FAA4F;YAC5F,2FAA2F;YAC3F,0FAA0F;YAC1F,2FAA2F;YAC3F,wEAAwE;KAC3E;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,mDAAmD,EACjD,oFAAoF;QACpF,0FAA0F;QAC1F,yFAAyF;QACzF,6DAA6D;IAC/D,8BAA8B,EAC5B,2FAA2F;QAC3F,sFAAsF;QACtF,2FAA2F;QAC3F,aAAa;IACf,kCAAkC,EAChC,sFAAsF;QACtF,2FAA2F;QAC3F,8FAA8F;QAC9F,iEAAiE;IACnE,6BAA6B,EAC3B,yFAAyF;IAC3F,iBAAiB,EACf,8FAA8F;QAC9F,iDAAiD;IACnD,mCAAmC,EACjC,yFAAyF;QACzF,0FAA0F;QAC1F,kCAAkC;IACpC,yBAAyB,EACvB,8FAA8F;QAC9F,+FAA+F;QAC/F,4FAA4F;QAC5F,8CAA8C;CACxC,CAAC;AAEX;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,iCAAiC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE1F,gFAAgF;AAChF,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAA4B,CAAC;AAC5F,CAAC;AAED,IAAI,QAAsC,CAAC;AAE3C,SAAS,kBAAkB;IACzB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,qBAAqB;IACrB,EAAE;IACF,iEAAiE;IACjE,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,wEAAwE;IACxE,0DAA0D;IAC1D,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC9C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,6FAA6F;AAC7F,SAAS,SAAS,CAAC,YAAoB;IACrC,IAAI,YAAY,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,YAAY;SAChB,KAAK,CAAC,CAAC,CAAC;SACR,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;QACvB,8CAA8C;QAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,GAAG,IAAI,GAAG,GAAG,CAAC;QAC/C,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;IAC5C,CAAC,EAAE,EAAE,CAAC,CAAC;AACX,CAAC;AAED,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAElD;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAkB,EAAE,QAAiB;IAC5D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,OAAO,GAAI,KAAK,CAAC,MAAsC,CAAC,eAAe,CAAC;QAC9E,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3D,OAAO,IAAI,kBAAkB,CAAC,YAAY,KAAK,cAAc,EAAE,KAAK,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC;IACnB,MAAM,KAAK,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC;IAC9D,IAAI,OAAO,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC;IAE1D,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAI,KAAK,CAAC,MAAwC,CAAC,aAAa,CAAC;QAC9E,IAAI,OAAO;YAAE,OAAO,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAI,KAAK,CAAC,MAAyC,CAAC,kBAAkB,CAAC;QAClF,OAAO,GAAG,GAAG,KAAK,IAAI,KAAK,+BAA+B,CAAC;QAC3D,OAAO,IAAI,kBAAkB,CAAC,OAAO,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,wCAAwC;IACxC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAI,QAA+C,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO;gBACL,iFAAiF;oBACjF,wCAAwC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,qBAAqB,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,OAAO,IAAI,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AASD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyB;IACnD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAE5B,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;IAC7D,CAAC;IAED,yEAAyE;IACzE,sCAAsC;IACtC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,oBAAoB;QACpB,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAC;QAC9E,MAAM,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,mEAAmE;IACnE,kDAAkD;IAClD,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5B,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACvC,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEzE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,oBAAoB,GACxB,8FAA8F,CAAC;AAEjG,yEAAyE;AACzE,SAAS,iBAAiB,CAAC,QAAuB;IAChD,IAAK,QAAoC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,IAAI,kBAAkB,CAAC,sBAAsB,oBAAoB,EAAE,EAAE,WAAW,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAuC,CAAC;IAChE,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,oBAAoB,EAAE,EAAE,YAAY,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,mBAAmB;IACnB,sBAAsB;IACtB,yCAAyC;IACzC,0CAA0C;CAC3C,CAAC,CAAC;AAEH,SAAS,4BAA4B,CAAC,QAAuB;IAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAC1B,6CAA6C,MAAM,KAAK;gBACtD,CAAC,MAAM,KAAK,mBAAmB;oBAC7B,CAAC,CAAC,gEAAgE;oBAClE,CAAC,CAAC,wFAAwF,CAAC,EAC/F,gBAAgB,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,SAAS,mCAAmC,CAAC,QAAuB;IAClE,MAAM,cAAc,GAAG,QAAQ,CAAC,mBAAmB,CAAC;IACpD,IAAI,cAAc,IAAI,IAAI;QAAE,OAAO;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,uBAAuB,KAAK,EAAE,CAAC;YAC5C,MAAM,IAAI,kBAAkB,CAC1B,YAAY,IAAI,qDAAqD;gBACnE,yEAAyE,EAC3E,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAC/D,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAU,CAAC;AACxD,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AACrD,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAIlC,SAAS,gBAAgB,CAAC,QAAmC;IAC3D,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,kBAAkB,CAC1B,6EAA6E,EAC7E,UAAU,CACX,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAC1B,yBAAyB,OAAO,CAAC,MAAM,iBAAiB,sBAAsB,GAAG,EACjF,UAAU,CACX,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,YAAY,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,kBAAkB,CAC1B,YAAY,IAAI,oBAAoB,mBAAmB,yCAAyC,EAChG,IAAI,CACL,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC3C,MAAM,IAAI,kBAAkB,CAAC,YAAY,IAAI,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,CAAC,GAAG,GAKT,CAAC;QACF,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAqB,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,kBAAkB,CAC1B,YAAY,IAAI,yBAAyB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EACrG,GAAG,IAAI,QAAQ,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAmB,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,kBAAkB,CAC1B,YAAY,IAAI,wBAAwB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAClG,GAAG,IAAI,OAAO,CACf,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,kBAAkB,CAC1B,YAAY,IAAI,mCAAmC,EACnD,GAAG,IAAI,QAAQ,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,kBAAkB,CAC1B,YAAY,IAAI,yCAAyC,EACzD,GAAG,IAAI,cAAc,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/manifest/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `@civitai/app-sdk/manifest` — NODE-ONLY build-time manifest validation.
+ *
+ * Separate from `./blocks` on purpose. `./blocks` is the browser contract and
+ * carries ZERO runtime dependencies (it ships into sandboxed iframes and every
+ * app inherits its install graph). This subpath reads the vendored canonical
+ * schema off disk with `node:fs` and compiles it with Ajv, which is an OPTIONAL
+ * PEER — install it where you use this:
+ *
+ *   pnpm add -D ajv
+ *
+ * Most callers want `@civitai/app-sdk/vite` instead, which wraps `defineBlock`
+ * in a Vite plugin that runs on every dev-server boot and every build.
+ */
+export { defineBlock, SCHEMA_DIVERGENCES, KNOWN_GAPS, loadCanonicalSchema } from './defineBlock.js';
+export type { DefineBlockConfig } from './defineBlock.js';
+export { BlockManifestError } from '../blocks/manifestError.js';
+export type { BlockManifest, BlockManifestV1 } from '../blocks/types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/manifest/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/manifest/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpG,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/manifest/index.js

@@ -0,0 +1,17 @@
+/**
+ * `@civitai/app-sdk/manifest` — NODE-ONLY build-time manifest validation.
+ *
+ * Separate from `./blocks` on purpose. `./blocks` is the browser contract and
+ * carries ZERO runtime dependencies (it ships into sandboxed iframes and every
+ * app inherits its install graph). This subpath reads the vendored canonical
+ * schema off disk with `node:fs` and compiles it with Ajv, which is an OPTIONAL
+ * PEER — install it where you use this:
+ *
+ *   pnpm add -D ajv
+ *
+ * Most callers want `@civitai/app-sdk/vite` instead, which wraps `defineBlock`
+ * in a Vite plugin that runs on every dev-server boot and every build.
+ */
+export { defineBlock, SCHEMA_DIVERGENCES, KNOWN_GAPS, loadCanonicalSchema } from './defineBlock.js';
+export { BlockManifestError } from '../blocks/manifestError.js';
+//# sourceMappingURL=index.js.map

package/dist/manifest/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/manifest/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEpG,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC"}