@civitai/app-sdk 0.56.1 → 0.57.0

package/dist/blocks/types.d.ts

@@ -1146,17 +1146,30 @@ export type WorkflowBodyStep = {
  *  3. **No resource policy / `urn:air:` scan.** AIR resources are ALLOWED here.
  *     Spend, not entitlement, is the binding control.
  *  4. **No `billingMode` and no load-time price invariant.** {@link maxBuzz}
- *     replaces them, exactly as on {@link WorkflowBodyCustomComfyInline}.
+ *     and a per-request orchestrator `whatif` quote replace them — see
+ *     `maxBuzz` below for how the two combine.
  *
  * WHAT STILL BOUNDS IT, all server-side:
  *  - A **denylist** of platform-internal `$type`s (scanners, moderation
  *    classifiers, hashing/model-ingestion, web egress) is refused by the host
  *    router before any spend reservation or orchestrator call. It is a DENYLIST,
  *    not an allowlist: a `$type` the host has never heard of is allowed through
- *    by construction, which is the point of this arm.
+ *    by construction, which is the point of this arm. `training` and
+ *    `imageResourceTraining` are deliberately NOT on it (a host operator
+ *    decision): both may be submitted here, on the same terms as every other
+ *    `$type`. If the orchestrator quotes the run, the host reserves the quote
+ *    (or `maxBuzz`, if larger), gated by the token's per-call budget, and
+ *    stamps no timeout; if it does
+ *    not, `maxBuzz` is both the reservation and the timeout — see `maxBuzz`
+ *    below. Whether a given training input is quoted, and at what price, is
+ *    the orchestrator's answer, not this package's: read it from `estimate`.
+ *    A host that supports it reports the trained epochs on
+ *    {@link BlockWorkflowSnapshot.trainedEpochs} without exposing the
+ *    checkpoint itself.
  *  - `$type` is bounded to **1…64 characters** and `input` to **262144 bytes**
  *    (256 KB) serialized. Both REJECT; neither truncates.
- *  - `maxBuzz` is the single spend knob — see its own note below.
+ *  - `maxBuzz` is the app's spend knob, and the host's quote can raise the
+ *    reservation above it — see its own note below.
  *
  * @example A pass-through body for an orchestrator step the registry does not
  * carry. Note there is no `step` key.
@@ -1205,23 +1218,34 @@ export type WorkflowBodyPassThroughStep = {
      */
     input: Record<string, unknown>;
     /**
-     * The per-job Buzz ceiling. Required, an integer in **1…250**.
-     *
-     * 🔴 **IT IS ALSO THE STEP TIMEOUT, IN SECONDS** — identical mechanism to
-     * {@link WorkflowBodyCustomComfyInline.maxBuzz}. The host stamps
-     * `stepTimeoutSeconds = maxBuzz`; there is only one number, which is what makes
-     * the ceiling physically enforceable rather than merely asserted. So
-     * `maxBuzz: 10` does not buy a cheap job; it buys one that is KILLED after 10
-     * seconds and comes back `expired`. Size it to the wall-clock time the step
-     * actually needs.
+     * The app's declared per-job Buzz amount: the least the host reserves, and —
+     * only when unquoted — the step timeout in seconds. NOT a spend ceiling (see
+     * below). Required, an integer in **1…250**.
      *
-     * You are billed the REAL cost: post-paid against measured GPU seconds,
-     * refunding the unused remainder of the ceiling, so a generous `maxBuzz` costs
-     * nothing extra when the job finishes early. `estimate` on a pass-through body
-     * echoes this number back as `cost.total` — an upper bound, not a price;
-     * surface it as "up to N Buzz".
+     * 🔴 **WHAT IT BOUNDS DEPENDS ON WHETHER THE HOST GOT A QUOTE** — this is NOT
+     * the mechanism of {@link WorkflowBodyCustomComfyInline.maxBuzz}, which is
+     * always the timeout. On both `estimate` and `submit` the host first asks the
+     * orchestrator for a `whatif` quote of this exact step, then:
+     *  - **Quoted** — the host reserves `max(maxBuzz, quote)` and stamps NO step
+     *    timeout. That reservation can exceed 250: it is gated against the token's
+     *    per-call budget (`token.buzzBudget` — the app's per-generation budget,
+     *    capped at 1000 when the host mints a production token), and a submit
+     *    whose reservation exceeds that budget comes back `failed` with an
+     *    `insufficient buzz budget` error before any Buzz is reserved.
+     *  - **Unquoted** (the orchestrator returned no price, or the quote could not
+     *    be had) — the host reserves `maxBuzz` and stamps it as the step timeout,
+     *    in seconds. `maxBuzz: 10` then buys a job that is KILLED after 10
+     *    seconds and comes back `expired`, so size it to the wall-clock time the
+     *    step actually needs. The same per-call budget gate applies. The timeout
+     *    bounds wall-clock time; it bounds spend only for a step billed by
+     *    compute time. A step priced per unit can bill ABOVE `maxBuzz`.
      *
-     * The host additionally requires `maxBuzz <= token.buzzBudget` before submit.
+     * `estimate` on a pass-through body returns, as `cost.total`, the number the
+     * submit would reserve: `max(maxBuzz, quote)`, or `maxBuzz` when unquoted.
+     * It is a reservation, NOT a guaranteed ceiling: the terminal settle refunds
+     * any unused remainder, but nothing on this arm stops a job billing above
+     * the reservation (see the unquoted case above). Do not present it to the
+     * viewer as a maximum.
      */
     maxBuzz: number;
 };
@@ -1310,6 +1334,226 @@ export interface BlockWorkflowSnapshot {
         amount: number;
         accountType: 'yellow' | 'blue' | 'red' | 'green';
     };
+    /**
+     * Checkpoint versions the host SILENTLY replaced before running the
+     * generation. `requested` is the version id the block asked for, `applied` is
+     * the one that actually ran (and was billed).
+     *
+     * On an ecosystem whose model is locked to a workflow, the host swaps a
+     * version id that is not offered for the current workflow for that workflow's
+     * default and still succeeds — graceful degradation that keeps an app pinned
+     * to a since-retired version working. This field only REPORTS the swap; the
+     * behaviour is unchanged.
+     *
+     * WHERE IT APPEARS: on the `kind: 'textToImage'` path only — the submit reply,
+     * the estimate reply, every submit reply that quotes a cost without
+     * submitting, and every later poll/cancel of that workflow (the record is
+     * persisted with it, so it sits next to the `imageUrls` it describes). An
+     * estimate creates no persisted workflow, so there it exists only on that
+     * reply. It does NOT appear for `customComfy` or `step` bodies: neither
+     * resolves a checkpoint, so there is nothing to substitute.
+     *
+     * OMITTED entirely when nothing was substituted. Absent on hosts that predate
+     * it.
+     */
+    modelSubstitutions?: BlockModelSubstitution[];
+    /**
+     * Generated FREE TEXT produced by a registered text-output step (e.g.
+     * `chat-completion`) — every string here has PASSED the host's output
+     * moderation scan.
+     *
+     * WHERE IT APPEARS: the poll and cancel replies (`poll()` / `cancel()` /
+     * `watch()` on `useBuzzWorkflow`). NOT on the submit reply — a submit returns
+     * a freshly-queued workflow with no output yet, so poll for the text. Also
+     * never on {@link AppWorkflow}, which has no text field.
+     *
+     * OMITTED entirely when there is no text. Independent of
+     * {@link BlockWorkflowSnapshot.textOutputWithheld}: a workflow with two text
+     * steps can release one and withhold the other, and both fields then appear.
+     */
+    textOutputs?: string[];
+    /**
+     * Set when a text-output step produced nothing the block can be given, with a
+     * user-facing sentence saying why. TWO distinct causes land here:
+     *
+     *   1. WITHHELD — text WAS produced and is being kept back: a content-policy
+     *      hit, or any other fail-CLOSED scan outcome (scanner error or timeout,
+     *      no verdict at all, an over-cap payload, or requested labels that came
+     *      back missing or errored). Every one of those paths returns the SAME
+     *      message, so this cause is one string with several origins.
+     *   2. UNPUBLISHABLE — the step SUCCEEDED and the scan RELEASED, but none of
+     *      what came back could be published (e.g. a provider tool-call `id`
+     *      outside the published charset). Nothing was moderated in this case,
+     *      and the message says so explicitly.
+     *
+     * `reason` is deliberately generic: it does not name the labels that
+     * triggered.
+     *
+     * 🔴 THE TWO CAUSES ARE NOT MACHINE-SEPARABLE without matching on the string,
+     * which is NOT a contract. Do not branch on the text of `reason`.
+     *
+     * 🔴 ONLY CAUSE 2 IS STATUS-GATED, and that gate reads the STEP's own
+     * `succeeded` status — never the workflow's. Cause 1 is not gated at all, so a
+     * CANCELLED generation CAN still set this field: the orchestrator returns
+     * whatever text it had already produced, that text is still scanned, and a
+     * hit still withholds it. A block that skips rendering `reason` on cancel
+     * would suppress a real content-policy explanation.
+     *
+     * A block polling a healthy in-flight generation sees the field absent — not
+     * because of its status, but because a step that has produced no text yet can
+     * reach neither cause.
+     *
+     * Independent of {@link BlockWorkflowSnapshot.textOutputs} rather than
+     * mutually exclusive, so `reason` is scoped to "a step in this response",
+     * never to the response as a whole. Same appearance rules as `textOutputs`.
+     */
+    textOutputWithheld?: {
+        reason: string;
+    };
+    /**
+     * Structured tool calls the model requested on a registered text-output step
+     * (e.g. `chat-completion` with tools), which have PASSED the same output
+     * moderation scan as {@link BlockWorkflowSnapshot.textOutputs}: every
+     * `arguments` string here was part of the text the scan released. The tool
+     * `name` is restricted to `[A-Za-z0-9_-]`, so it cannot carry prose.
+     *
+     * Each entry is fully populated — the host drops a call it cannot fill
+     * completely rather than publishing a partial one.
+     *
+     * Same appearance rules as `textOutputs` (poll and cancel replies only).
+     * OMITTED entirely when there are none.
+     */
+    toolCalls?: BlockStepToolCall[];
+    /**
+     * The raw orchestrator output of each PASS-THROUGH step
+     * ({@link WorkflowBodyPassThroughStep}: `kind: 'step'` with a `$type`), as
+     * `{ $type, output }`, forwarded as-is — minus its blobs.
+     *
+     * Blob-SHAPED values are removed from `output`; their available urls go to
+     * {@link BlockWorkflowSnapshot.imageUrls} (and to {@link AppWorkflow.images})
+     * instead, so a pass-through step does not open a second image channel.
+     * "Blob-shaped" is the exact scope of that: a url held in a plain string
+     * field of the output is not a blob and can still appear here.
+     *
+     * 🔴 UNSCANNED. Unlike `textOutputs`, no moderation scan runs over this
+     * field; moderation for the pass-through arm happens at the publish boundary.
+     * Treat any text in it accordingly.
+     *
+     * 🔴 A `$type` that is ALSO a registered step's orchestrator type (e.g.
+     * `chatCompletion`, which `chat-completion` uses) is handled by that
+     * registered step instead — its text arrives on `textOutputs`, scanned, and
+     * it does not appear here. Which channel a pass-through `$type` lands on can
+     * therefore change the day the host registers a step for it.
+     *
+     * `output` is `unknown`: its shape is whatever the orchestrator returns for
+     * that `$type`. OMITTED entirely when the workflow has no pass-through step
+     * with an unregistered `$type`.
+     */
+    stepOutputs?: Array<{
+        $type: string;
+        output: unknown;
+    }>;
+    /**
+     * The epochs of a pass-through `training` / `imageResourceTraining` step
+     * (see {@link WorkflowBodyPassThroughStep}) that PRODUCED A CHECKPOINT — one
+     * entry per epoch, each naming the step's `$type` and its `epochNumber`.
+     * Only runs whose training moderation status is approved are listed; an
+     * unmoderated or refused run reports no epochs.
+     *
+     * 🔴 THE CHECKPOINT ITSELF IS DELIBERATELY NOT EXPOSED — this field carries
+     * no download url. (An older host may still surface checkpoint urls in
+     * `imageUrls` or `stepOutputs` for a training step; that is a host defect,
+     * not a contract — never treat an `imageUrls` entry as a checkpoint.) To
+     * publish a trained epoch, navigate the viewer to Civitai's own model wizard:
+     *
+     * ```ts
+     * const { navigate } = useCivitaiNavigate();
+     * navigate(
+     *   `models/train/from-orchestrator?workflowId=${snapshot.workflowId}&epoch=${epoch.epochNumber}`,
+     *   { scope: 'site' },
+     * );
+     * ```
+     *
+     * The viewer completes (or abandons) the publish there, on Civitai's surface;
+     * {@link BlockWorkflowSnapshot.publishedModel} then reports the result.
+     *
+     * 🔴 REQUIRES A HOST VERSION THAT EMITS IT. Absent on older hosts — treat
+     * absence as "unknown", not as "no checkpoint". The run's spend and timeout
+     * follow the pass-through arm's rules — see
+     * {@link WorkflowBodyPassThroughStep.maxBuzz}.
+     */
+    trainedEpochs?: BlockTrainedEpoch[];
+    /**
+     * The Civitai model this run has been published as — present once the viewer
+     * has STARTED or FINISHED publishing it through the model wizard reached from
+     * {@link BlockWorkflowSnapshot.trainedEpochs}. `published` is `false` while the
+     * model is still a draft and `true` once it is published.
+     *
+     * 🔴 REQUIRES A HOST VERSION THAT EMITS IT. Absent on older hosts, and absent
+     * on any run nobody has started publishing.
+     */
+    publishedModel?: BlockPublishedModel;
+}
+/**
+ * Why the host substituted a checkpoint version — see
+ * {@link BlockWorkflowSnapshot.modelSubstitutions}.
+ *
+ *  - `'wrong-workflow'` — the id IS one of this ecosystem's workflow-scoped
+ *    versions, but for a DIFFERENT workflow (e.g. an edit-only version sent to
+ *    text-to-image).
+ *  - `'unrecognized'` — the id is in no scoped list for this ecosystem: a
+ *    community checkpoint, or a version retired since the app shipped.
+ *  - `'gated'` — the id IS offered for this workflow, but a gate rule hid it
+ *    from THIS viewer. The app is not wrong; the viewer may not use it.
+ *
+ * The host may add a reason in a later version, and the SDK's inbound
+ * validator does not reject an unrecognised one — handle an unknown value as a
+ * generic substitution rather than assuming the list is closed.
+ */
+export type ModelSubstitutionReason = 'wrong-workflow' | 'unrecognized' | 'gated';
+/** One entry of {@link BlockWorkflowSnapshot.modelSubstitutions}. */
+export interface BlockModelSubstitution {
+    /** The checkpoint version id the block asked for. */
+    requested: number;
+    /** The checkpoint version id that actually ran. */
+    applied: number;
+    reason: ModelSubstitutionReason;
+}
+/** One entry of {@link BlockWorkflowSnapshot.toolCalls}. */
+export interface BlockStepToolCall {
+    id: string;
+    /**
+     * The SDK's inbound validator checks only that it is a string, so a value
+     * the host adds later can arrive — do not assume `'function'` exhaustively.
+     */
+    type: 'function';
+    function: {
+        /** Restricted to `[A-Za-z0-9_-]`. */
+        name: string;
+        /** The model's arguments, as the JSON string it produced. Scanned. */
+        arguments: string;
+    };
+}
+/** One entry of {@link BlockWorkflowSnapshot.trainedEpochs}. */
+export interface BlockTrainedEpoch {
+    /**
+     * Which pass-through training `$type` produced this epoch. The SDK's inbound
+     * validator checks only that it is a string, so a value the host adds later
+     * can arrive — give an exhaustive `switch` a default branch.
+     */
+    $type: 'training' | 'imageResourceTraining';
+    /** Pass as `epoch` to the `/models/train/from-orchestrator` wizard route. */
+    epochNumber: number;
+}
+/**
+ * The model a training run was published as —
+ * {@link BlockWorkflowSnapshot.publishedModel} / {@link AppWorkflow.publishedModel}.
+ */
+export interface BlockPublishedModel {
+    modelId: number;
+    modelVersionId: number;
+    /** `false` while the model is still a draft in the wizard; `true` once published. */
+    published: boolean;
 }
 /**
  * Which side of the settings split a field lives on.
@@ -1827,6 +2071,16 @@ export interface AppWorkflow {
     cost: number | null;
     /** ISO-8601. */
     createdAt: string;
+    /**
+     * The Civitai model a training run in this workflow was published as —
+     * present once the viewer has started or finished publishing it through the
+     * model wizard. Same shape and meaning as
+     * {@link BlockWorkflowSnapshot.publishedModel}.
+     *
+     * 🔴 REQUIRES A HOST VERSION THAT EMITS IT. Absent on older hosts, and on
+     * every workflow nobody has published.
+     */
+    publishedModel?: BlockPublishedModel;
 }
 /**
  * Per-viewer gated projection of ONE image returned by `GET_IMAGES_BY_IDS`

package/dist/index.d.ts

@@ -25,10 +25,16 @@
  *
  *  - **`./blocks`** — importing it RUNS `./safe-storage` for its side effect
  *    (repairing `localStorage`/`sessionStorage` at an opaque origin). Folding
- *    119 symbols and that side effect into the root would make every OAuth app
+ *    135 symbols and that side effect into the root would make every OAuth app
  *    that writes `import { exchangeCode } from '@civitai/app-sdk'` pay for the
  *    Civitai-Apps contract it does not use. Blocks and OAuth apps are disjoint
  *    audiences; see this package's README.
+ *    🔴 That 135 is ASSERTED, not merely quoted — by
+ *    `packages/civitai-app-sdk/test/export-surface.test.ts`, which pins
+ *    `surface.get('./blocks').size`. It said 119 here against a real 125 until
+ *    2026-10-04, because the existing checks pin the root as an exact union and
+ *    each subpath's set relations, none of which can see a subpath GROW. Update
+ *    both this line and the ledger `reason` in that file together.
  *  - **`./safe-storage`** — the same side effect, and its whole point is being
  *    imported FOR it (`import '@civitai/app-sdk/safe-storage'`). A side effect
  *    on the root barrel is not something a consumer can opt out of.

package/dist/index.js

@@ -25,10 +25,16 @@
  *
  *  - **`./blocks`** — importing it RUNS `./safe-storage` for its side effect
  *    (repairing `localStorage`/`sessionStorage` at an opaque origin). Folding
- *    119 symbols and that side effect into the root would make every OAuth app
+ *    135 symbols and that side effect into the root would make every OAuth app
  *    that writes `import { exchangeCode } from '@civitai/app-sdk'` pay for the
  *    Civitai-Apps contract it does not use. Blocks and OAuth apps are disjoint
  *    audiences; see this package's README.
+ *    🔴 That 135 is ASSERTED, not merely quoted — by
+ *    `packages/civitai-app-sdk/test/export-surface.test.ts`, which pins
+ *    `surface.get('./blocks').size`. It said 119 here against a real 125 until
+ *    2026-10-04, because the existing checks pin the root as an exact union and
+ *    each subpath's set relations, none of which can see a subpath GROW. Update
+ *    both this line and the ledger `reason` in that file together.
  *  - **`./safe-storage`** — the same side effect, and its whole point is being
  *    imported FOR it (`import '@civitai/app-sdk/safe-storage'`). A side effect
  *    on the root barrel is not something a consumer can opt out of.

package/dist/orchestrator/index.d.ts

@@ -75,7 +75,12 @@ export declare const WORKFLOW_STEP_TYPES: {
     readonly imageBackgroundRemoval: "Image background removal (BiRefNet)";
     /** Vectorize a raster image with a local StarVector / OmniSVG model. */
     readonly imageToSvg: "Raster image → SVG vectorization";
-    /** LoRA / DoRA / embedding training. Long-running. */
+    /**
+     * LoRA / DoRA / embedding training. Long-running. Allowed on an App Block's
+     * pass-through arm, where `maxBuzz` (1–250) is its timeout in seconds only
+     * when the orchestrator returns no quote — see `WorkflowBodyPassThroughStep`
+     * in `@civitai/app-sdk/blocks`.
+     */
     readonly imageResourceTraining: "Train a LoRA / DoRA / embedding from a dataset";
     /** Pre-process an image (resize, ControlNet preprocessor, etc.). */
     readonly preprocessImage: "Image preprocessing (resize, ControlNet preprocessors, …)";
@@ -152,7 +157,8 @@ export declare const WORKFLOW_STEP_TYPES: {
     /**
      * Generic training step. Engines: `ai-toolkit`, `comfy`. Distinct from
      * {@link WORKFLOW_STEP_TYPES.imageResourceTraining}, which is the older
-     * kohya/musubi/flux-dev-fast LoRA path.
+     * kohya/musubi/flux-dev-fast LoRA path. Allowed on an App Block's
+     * pass-through arm on the same terms as `imageResourceTraining`.
      */
     readonly training: "Model training (ai-toolkit / comfy engines)";
     /** Hash an image / video / model for dedup or lookup. */
@@ -213,6 +219,8 @@ export declare const WORKFLOW_STEP_TYPES: {
     readonly comfyNodepackSnapshot: "Snapshot a worker’s installed ComfyUI node packs (internal)";
     /** Qwen image benchmarking harness. */
     readonly qwenImageBench: "Qwen image benchmarking (internal)";
+    readonly liveTranscription: "Live speech-to-text from audio streamed while the user talks";
+    readonly merge: "Merge — combine fields from earlier steps' outputs into one result";
 };
 export type WorkflowStepType = keyof typeof WORKFLOW_STEP_TYPES;
 /**

package/dist/orchestrator/index.js

@@ -77,7 +77,12 @@ export const WORKFLOW_STEP_TYPES = {
     imageBackgroundRemoval: 'Image background removal (BiRefNet)',
     /** Vectorize a raster image with a local StarVector / OmniSVG model. */
     imageToSvg: 'Raster image → SVG vectorization',
-    /** LoRA / DoRA / embedding training. Long-running. */
+    /**
+     * LoRA / DoRA / embedding training. Long-running. Allowed on an App Block's
+     * pass-through arm, where `maxBuzz` (1–250) is its timeout in seconds only
+     * when the orchestrator returns no quote — see `WorkflowBodyPassThroughStep`
+     * in `@civitai/app-sdk/blocks`.
+     */
     imageResourceTraining: 'Train a LoRA / DoRA / embedding from a dataset',
     /** Pre-process an image (resize, ControlNet preprocessor, etc.). */
     preprocessImage: 'Image preprocessing (resize, ControlNet preprocessors, …)',
@@ -159,7 +164,8 @@ export const WORKFLOW_STEP_TYPES = {
     /**
      * Generic training step. Engines: `ai-toolkit`, `comfy`. Distinct from
      * {@link WORKFLOW_STEP_TYPES.imageResourceTraining}, which is the older
-     * kohya/musubi/flux-dev-fast LoRA path.
+     * kohya/musubi/flux-dev-fast LoRA path. Allowed on an App Block's
+     * pass-through arm on the same terms as `imageResourceTraining`.
      */
     training: 'Model training (ai-toolkit / comfy engines)',
     // ----- Classification / tagging / moderation ----------------------------
@@ -228,6 +234,15 @@ export const WORKFLOW_STEP_TYPES = {
     comfyNodepackSnapshot: 'Snapshot a worker’s installed ComfyUI node packs (internal)',
     /** Qwen image benchmarking harness. */
     qwenImageBench: 'Qwen image benchmarking (internal)',
+    // ----- Auto-added 2026-10-06 from the orchestrator spec ----------------------
+    // Added by scripts/sync-orchestrator-catalogs.mjs: the live spec accepts
+    // these and this catalog did not list them. MOVE each entry into the right
+    // section above, and replace any TODO(catalog) line with a real one-line
+    // description — `pnpm check:catalogs` names every placeholder that is left.
+    // (That check is advisory, so it will not stop this merging. It is a
+    // reminder, not a gate.)
+    liveTranscription: 'Live speech-to-text from audio streamed while the user talks',
+    merge: "Merge — combine fields from earlier steps' outputs into one result",
 };
 /**
  * Engines that the `imageGen` step accepts. Each one has its own input shape;

package/dist/orchestrator/steps.d.ts

@@ -3,7 +3,7 @@
  * own generated client (`@civitai/client`).
  *
  * The sibling `@civitai/app-sdk/orchestrator` module gives you the *catalog*
- * (`WORKFLOW_STEP_TYPES` — 51 `$type` names and what each one does) and the
+ * (`WORKFLOW_STEP_TYPES` — 53 `$type` names and what each one does) and the
  * fetch helpers (`submitWorkflow`, `estimateWorkflow`, …), but its body
  * builders take `input: unknown`. This module is the missing half: the actual
  * per-step input shapes, tracked against the orchestrator's OpenAPI spec by
@@ -65,12 +65,20 @@
  *
  * The practical consequence: a number of the 47 step types below exist to serve
  * Civitai's own pipelines rather than third-party apps — `modelPickleScan`,
- * `xGuardModeration`, `training`, `comfyNodepackSnapshot`, `qwenImageBench`,
+ * `xGuardModeration`, `comfyNodepackSnapshot`, `qwenImageBench`,
  * the `model*` / `media*` hashing and classification steps. They are in the
  * consumer spec, so they are typed here. They are not an invitation.
  *
+ * `training` and `imageResourceTraining` are the exception: an App Block's host
+ * explicitly ALLOWS both on the pass-through arm (`WorkflowBodyPassThroughStep`
+ * in `blocks/types.ts`), with the same spend rules as any other `$type` there
+ * (see `WorkflowBodyPassThroughStep.maxBuzz`). The trained checkpoint is not
+ * part of the block contract; publishing goes through Civitai's model wizard
+ * (`BlockWorkflowSnapshot.trainedEpochs`). For a standalone app the
+ * orchestrator's own authorization still decides.
+ *
  * ⚠️ `WORKFLOW_STEP_TYPES` does NOT mark most of them. Counted at this commit:
- * of its 51 entries, exactly TWO sit under its "Platform internals" heading —
+ * of its 53 entries, exactly TWO sit under its "Platform internals" heading —
  * `comfyNodepackSnapshot` and `qwenImageBench`. `training`, `webScrape`,
  * `xGuardModeration`, `modelPickleScan` and the `model*` / `media*` steps are
  * ordinary documented entries under ordinary headings, and `webScrape` carries
@@ -89,10 +97,10 @@
  * (#315) without anything going red. The measured state, derived rather than
  * typed:
  *
- * `WORKFLOW_STEP_TYPES` documents 51 `$type`s; this map covers 47. The 4 with
+ * `WORKFLOW_STEP_TYPES` documents 53 `$type`s; this map covers 47. The 6 with
  * no generated template in the pinned `@civitai/client` are `imageScanning`,
- * `preprocessVideo`, `soniloAudioGen`, `yuE2`, and `WorkflowStepTemplateFor<…>` is a compile
- * error for each of them.
+ * `liveTranscription`, `merge`, `preprocessVideo`, `soniloAudioGen`, `yuE2`, and
+ * `WorkflowStepTemplateFor<…>` is a compile error for each of them.
  *
  * That gap is EXPECTED and is not a defect in either surface. The catalog
  * tracks the LIVE orchestrator spec (`pnpm check:catalogs` and the daily
@@ -300,7 +308,7 @@ interface StepTemplateMap {
     xGuardModeration: XGuardModerationStepTemplate;
 }
 /**
- * `$type` → its step-template type, for 47 of the catalog's 51 step types.
+ * `$type` → its step-template type, for 47 of the catalog's 53 step types.
  *
  * Keyed by the WIRE name rather than the generated type name, because the wire
  * name is what you actually have in hand and the generator does not always

package/dist/orchestrator/steps.js

@@ -3,7 +3,7 @@
  * own generated client (`@civitai/client`).
  *
  * The sibling `@civitai/app-sdk/orchestrator` module gives you the *catalog*
- * (`WORKFLOW_STEP_TYPES` — 51 `$type` names and what each one does) and the
+ * (`WORKFLOW_STEP_TYPES` — 53 `$type` names and what each one does) and the
  * fetch helpers (`submitWorkflow`, `estimateWorkflow`, …), but its body
  * builders take `input: unknown`. This module is the missing half: the actual
  * per-step input shapes, tracked against the orchestrator's OpenAPI spec by
@@ -65,12 +65,20 @@
  *
  * The practical consequence: a number of the 47 step types below exist to serve
  * Civitai's own pipelines rather than third-party apps — `modelPickleScan`,
- * `xGuardModeration`, `training`, `comfyNodepackSnapshot`, `qwenImageBench`,
+ * `xGuardModeration`, `comfyNodepackSnapshot`, `qwenImageBench`,
  * the `model*` / `media*` hashing and classification steps. They are in the
  * consumer spec, so they are typed here. They are not an invitation.
  *
+ * `training` and `imageResourceTraining` are the exception: an App Block's host
+ * explicitly ALLOWS both on the pass-through arm (`WorkflowBodyPassThroughStep`
+ * in `blocks/types.ts`), with the same spend rules as any other `$type` there
+ * (see `WorkflowBodyPassThroughStep.maxBuzz`). The trained checkpoint is not
+ * part of the block contract; publishing goes through Civitai's model wizard
+ * (`BlockWorkflowSnapshot.trainedEpochs`). For a standalone app the
+ * orchestrator's own authorization still decides.
+ *
  * ⚠️ `WORKFLOW_STEP_TYPES` does NOT mark most of them. Counted at this commit:
- * of its 51 entries, exactly TWO sit under its "Platform internals" heading —
+ * of its 53 entries, exactly TWO sit under its "Platform internals" heading —
  * `comfyNodepackSnapshot` and `qwenImageBench`. `training`, `webScrape`,
  * `xGuardModeration`, `modelPickleScan` and the `model*` / `media*` steps are
  * ordinary documented entries under ordinary headings, and `webScrape` carries
@@ -89,10 +97,10 @@
  * (#315) without anything going red. The measured state, derived rather than
  * typed:
  *
- * `WORKFLOW_STEP_TYPES` documents 51 `$type`s; this map covers 47. The 4 with
+ * `WORKFLOW_STEP_TYPES` documents 53 `$type`s; this map covers 47. The 6 with
  * no generated template in the pinned `@civitai/client` are `imageScanning`,
- * `preprocessVideo`, `soniloAudioGen`, `yuE2`, and `WorkflowStepTemplateFor<…>` is a compile
- * error for each of them.
+ * `liveTranscription`, `merge`, `preprocessVideo`, `soniloAudioGen`, `yuE2`, and
+ * `WorkflowStepTemplateFor<…>` is a compile error for each of them.
  *
  * That gap is EXPECTED and is not a defect in either surface. The catalog
  * tracks the LIVE orchestrator spec (`pnpm check:catalogs` and the daily

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civitai/app-sdk",
-  "version": "0.56.1",
+  "version": "0.57.0",
   "description": "OAuth + PKCE, encrypted-cookie sessions, scopes, and orchestrator helpers for building third-party Civitai apps.",
   "license": "MIT",
   "type": "module",