@civitai/blocks-react 0.12.4 → 0.13.0

package/dist/internal/catalog.d.ts

@@ -0,0 +1,190 @@
+/**
+ * SDK-internal catalog client for the LIVE host's in-harness resource picker
+ * (Phase 1 of "make `dev:live` a faithful local host").
+ *
+ * The real platform host opens civitai's OWN model-picker modal when a block
+ * sends `OPEN_CHECKPOINT_PICKER` / `OPEN_RESOURCE_PICKER`. Locally, `dev:live`
+ * has no civitai chrome — so {@link createLiveHost} serves a PROTOCOL-IDENTICAL
+ * equivalent: a tiny in-harness catalog browser backed by this client. The
+ * block code (`useCheckpointPicker` / `useResourcePicker`) is byte-identical to
+ * production; only the picker chrome differs.
+ *
+ * TWO READ PATHS (mirrors the reference block-side catalog client), chosen by
+ * whether a block token is present:
+ *
+ *  1. AUTHORITATIVE (the live host always has the dev block token): the
+ *     block-gated endpoint `/api/v1/blocks/models` with
+ *     `Authorization: Bearer <token>` (civitai PR #2671). Same response shape as
+ *     the public `/api/v1/models` but AUTHORITATIVELY CLAMPS the catalog's
+ *     browsing level to the token's signed `maxBrowsingLevel` ceiling. The
+ *     client NEVER sends `nsfw`/`browsingLevel` — maturity is server-enforced.
+ *     The page block token CAN read `/blocks/models` (no extra scope).
+ *
+ *  2. PUBLIC (graceful fallback): `/api/v1/models` is a MixedAuthEndpoint
+ *     returning `Access-Control-Allow-Origin: *`. We pass `nsfw=false` for an
+ *     advisory-SFW view. Used only when the authoritative path isn't deployed /
+ *     authorized yet (404/401/403) or throws (CORS/network).
+ *
+ * MONEY-SAFETY: a pick from this catalog is DISCOVERY ONLY. The returned
+ * `versionId` is a HINT, never an entitlement — the server re-validates AND
+ * prices every id at estimate/submit (the page gate + orchestrator belt). A
+ * browse here, authoritative or public, never moves Buzz and never implies the
+ * pick is trusted.
+ *
+ * Everything here is pure + node-testable: the URL/param builders, the
+ * response→option mappers (`BlockCheckpointInfo` / `BlockResourceInfo`), and a
+ * thin fetch client that takes an injectable `fetch` (tests drive success /
+ * empty / non-OK / throw / fallback without a real network).
+ */
+import type { BlockCheckpointInfo, BlockResourceInfo } from '@civitai/app-sdk/blocks';
+/** The public REST base. */
+export declare const CATALOG_API_BASE = "/api/v1/models";
+/** The authoritative, block-token-gated, maturity-clamped catalog base (#2671). */
+export declare const CATALOG_API_BASE_BLOCKS = "/api/v1/blocks/models";
+/** The REST `types` filter value for each picker model type. */
+export type CatalogModelType = 'Checkpoint' | 'LORA';
+/** Default page size — small enough to keep the grid + payload light. */
+export declare const DEFAULT_LIMIT = 24;
+/** Default thumbnail width requested from the image edge (cache-aligned). */
+export declare const THUMB_WIDTH = 320;
+export interface CatalogQuery {
+    /** Which model type to browse — maps directly to the REST `types` param. */
+    types: CatalogModelType;
+    /** Meili text search; empty/whitespace → omitted (default popular view). */
+    query?: string;
+    /** ≤100 (server cap). Defaults to {@link DEFAULT_LIMIT}. */
+    limit?: number;
+    cursor?: string;
+}
+export interface BuildUrlOptions {
+    base?: string;
+    /**
+     * Append `nsfw=false` (advisory SFW). Only the PUBLIC endpoint reads this; the
+     * authoritative `/blocks/models` IGNORES client maturity (server clamps), so we
+     * never send it there. Defaults to `false`.
+     */
+    sfwOnly?: boolean;
+}
+/**
+ * Build a catalog URL for a query. Pure + deterministic so the request is
+ * stable. Empty query is omitted (the default popular view). `limit` is clamped
+ * to [1, 100]. `sfwOnly` appends `nsfw=false` — PUBLIC endpoint only.
+ *
+ * `baseOrOpts` may be a bare base string (back-compat) or a {@link BuildUrlOptions}.
+ */
+export declare function buildCatalogUrl(q: CatalogQuery, baseOrOpts?: string | BuildUrlOptions): string;
+interface RawImage {
+    url?: string;
+}
+interface RawModelVersion {
+    id?: number;
+    name?: string;
+    baseModel?: string;
+    images?: RawImage[];
+}
+interface RawModel {
+    id?: number;
+    name?: string;
+    type?: string;
+    nsfw?: boolean;
+    modelVersions?: RawModelVersion[];
+}
+interface RawResponse {
+    items?: RawModel[];
+    metadata?: {
+        nextCursor?: string | null;
+    };
+}
+/**
+ * A normalized card the in-harness grid renders. One per model (its top
+ * version). Carries everything {@link cardToCheckpoint} / {@link cardToResource}
+ * need to build the protocol-identical picker reply payload.
+ */
+export interface CatalogCard {
+    modelId: number;
+    versionId: number;
+    modelName: string;
+    versionName: string;
+    baseModel: string;
+    modelType: string;
+    thumbnailUrl: string | null;
+    nsfw: boolean;
+}
+export interface CatalogPage {
+    cards: CatalogCard[];
+    nextCursor: string | null;
+}
+/**
+ * Rewrite a Civitai image edge URL to a small, optimized thumbnail so we hit the
+ * CDN-cached variant instead of an origin transcode. Handles `original=true`,
+ * `width=NNN`, or no transform segment. Pure + total — never throws.
+ */
+export declare function edgeThumb(url: string, width?: number): string;
+/**
+ * Map ONE raw model → a card using its FIRST modelVersion (REST default order
+ * puts the latest/primary first) and that version's first image. Returns `null`
+ * for an unusable row (no version id). Tolerant of any missing field.
+ */
+export declare function modelToCard(raw: RawModel | null | undefined, imageWidth?: number): CatalogCard | null;
+/** Map a full raw response → a page of cards + the next cursor. Never throws. */
+export declare function responseToPage(raw: RawResponse | null | undefined, imageWidth?: number): CatalogPage;
+/**
+ * Map a browsed card → the EXACT `BlockCheckpointInfo` shape the production host
+ * returns in `CHECKPOINT_PICKER_RESULT.selected`. Protocol fidelity: the block's
+ * `useCheckpointPicker()` consumes this identically in dev:live and in prod.
+ */
+export declare function cardToCheckpoint(card: CatalogCard): BlockCheckpointInfo;
+/**
+ * Map a browsed card → the EXACT `BlockResourceInfo` shape the production host
+ * returns in `RESOURCE_PICKER_RESULT.selected`. `modelType` is the canonical
+ * type the host resolved (e.g. 'Checkpoint' | 'LORA').
+ */
+export declare function cardToResource(card: CatalogCard, modelType: string): BlockResourceInfo;
+/**
+ * Client-side family hint: keep only cards whose `baseModel` plausibly matches
+ * the requested `baseModelGroup` (ecosystem key like 'Flux1'/'SDXL' OR a
+ * baseModel name like 'Flux.1 D'). Loose substring/token match — the REAL family
+ * constraint is server-enforced at submit; this is purely a dev-UX convenience
+ * that NARROWS the browse, never widens it. An empty/absent group returns the
+ * cards unchanged.
+ */
+export declare function filterCardsByFamily(cards: CatalogCard[], baseModelGroup: string | undefined): CatalogCard[];
+export type CatalogResult = {
+    kind: 'ok';
+    page: CatalogPage;
+    authoritative: boolean;
+} | {
+    kind: 'empty';
+    authoritative: boolean;
+} | {
+    kind: 'error';
+    status?: number;
+    message: string;
+};
+export type FallbackInfo = {
+    status: number;
+} | {
+    reason: 'network';
+};
+export interface FetchCatalogDeps {
+    /** Injectable `fetch` — the live host passes its own `fetchImpl`. */
+    fetch: typeof fetch;
+    /** Backend origin (e.g. `https://civitai.com`) the relative bases resolve against. */
+    baseUrl: string;
+    /** Raw block JWT. Present → authoritative path with fallback. Absent → public. */
+    token?: string | null;
+    imageWidth?: number;
+    /** Advisory SFW for the PUBLIC read. Defaults to true (fail-closed SFW). */
+    anonSfwOnly?: boolean;
+    onFallback?: (info: FallbackInfo) => void;
+}
+/**
+ * Fetch one catalog page, choosing the authoritative (token, maturity-clamped)
+ * or public (advisory-SFW) endpoint and gracefully falling back from the former
+ * to the latter when it isn't deployed / authorized yet (404/401/403) or throws
+ * (CORS/preflight/network). A failure on the PUBLIC path is a hard error (no
+ * infinite loop). Never throws.
+ */
+export declare function fetchCatalog(q: CatalogQuery, deps: FetchCatalogDeps): Promise<CatalogResult>;
+export {};
+//# sourceMappingURL=catalog.d.ts.map

package/dist/internal/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/internal/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,4BAA4B;AAC5B,eAAO,MAAM,gBAAgB,mBAAmB,CAAC;AAEjD,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAE/D,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,MAAM,CAAC;AAErD,yEAAyE;AACzE,eAAO,MAAM,aAAa,KAAK,CAAC;AAEhC,6EAA6E;AAC7E,eAAO,MAAM,WAAW,MAAM,CAAC;AAE/B,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,KAAK,EAAE,gBAAgB,CAAC;IACxB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAOD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,CAAC,EAAE,YAAY,EACf,UAAU,GAAE,MAAM,GAAG,eAAkC,GACtD,MAAM,CAWR;AAOD,UAAU,QAAQ;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AACD,UAAU,eAAe;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;CACrB;AACD,UAAU,QAAQ;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,eAAe,EAAE,CAAC;CACnC;AACD,UAAU,WAAW;IACnB,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC3C;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAMD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,GAAE,MAAoB,GAAG,MAAM,CAa1E;AA6BD;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EAChC,UAAU,SAAc,GACvB,WAAW,GAAG,IAAI,CAiBpB;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAC5B,GAAG,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,EACnC,UAAU,SAAc,GACvB,WAAW,CASb;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,mBAAmB,CAQvE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,iBAAiB,CAUtF;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,WAAW,EAAE,EACpB,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,WAAW,EAAE,CAef;AASD,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AA8BtE,MAAM,WAAW,gBAAgB;IAC/B,qEAAqE;IACrE,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,IAAI,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAkClG"}

package/dist/internal/catalog.js

@@ -0,0 +1,283 @@
+/**
+ * SDK-internal catalog client for the LIVE host's in-harness resource picker
+ * (Phase 1 of "make `dev:live` a faithful local host").
+ *
+ * The real platform host opens civitai's OWN model-picker modal when a block
+ * sends `OPEN_CHECKPOINT_PICKER` / `OPEN_RESOURCE_PICKER`. Locally, `dev:live`
+ * has no civitai chrome — so {@link createLiveHost} serves a PROTOCOL-IDENTICAL
+ * equivalent: a tiny in-harness catalog browser backed by this client. The
+ * block code (`useCheckpointPicker` / `useResourcePicker`) is byte-identical to
+ * production; only the picker chrome differs.
+ *
+ * TWO READ PATHS (mirrors the reference block-side catalog client), chosen by
+ * whether a block token is present:
+ *
+ *  1. AUTHORITATIVE (the live host always has the dev block token): the
+ *     block-gated endpoint `/api/v1/blocks/models` with
+ *     `Authorization: Bearer <token>` (civitai PR #2671). Same response shape as
+ *     the public `/api/v1/models` but AUTHORITATIVELY CLAMPS the catalog's
+ *     browsing level to the token's signed `maxBrowsingLevel` ceiling. The
+ *     client NEVER sends `nsfw`/`browsingLevel` — maturity is server-enforced.
+ *     The page block token CAN read `/blocks/models` (no extra scope).
+ *
+ *  2. PUBLIC (graceful fallback): `/api/v1/models` is a MixedAuthEndpoint
+ *     returning `Access-Control-Allow-Origin: *`. We pass `nsfw=false` for an
+ *     advisory-SFW view. Used only when the authoritative path isn't deployed /
+ *     authorized yet (404/401/403) or throws (CORS/network).
+ *
+ * MONEY-SAFETY: a pick from this catalog is DISCOVERY ONLY. The returned
+ * `versionId` is a HINT, never an entitlement — the server re-validates AND
+ * prices every id at estimate/submit (the page gate + orchestrator belt). A
+ * browse here, authoritative or public, never moves Buzz and never implies the
+ * pick is trusted.
+ *
+ * Everything here is pure + node-testable: the URL/param builders, the
+ * response→option mappers (`BlockCheckpointInfo` / `BlockResourceInfo`), and a
+ * thin fetch client that takes an injectable `fetch` (tests drive success /
+ * empty / non-OK / throw / fallback without a real network).
+ */
+/** The public REST base. */
+export const CATALOG_API_BASE = '/api/v1/models';
+/** The authoritative, block-token-gated, maturity-clamped catalog base (#2671). */
+export const CATALOG_API_BASE_BLOCKS = '/api/v1/blocks/models';
+/** Default page size — small enough to keep the grid + payload light. */
+export const DEFAULT_LIMIT = 24;
+/** Default thumbnail width requested from the image edge (cache-aligned). */
+export const THUMB_WIDTH = 320;
+function clampLimit(n) {
+    if (!Number.isFinite(n))
+        return DEFAULT_LIMIT;
+    return Math.max(1, Math.min(100, Math.floor(n)));
+}
+/**
+ * Build a catalog URL for a query. Pure + deterministic so the request is
+ * stable. Empty query is omitted (the default popular view). `limit` is clamped
+ * to [1, 100]. `sfwOnly` appends `nsfw=false` — PUBLIC endpoint only.
+ *
+ * `baseOrOpts` may be a bare base string (back-compat) or a {@link BuildUrlOptions}.
+ */
+export function buildCatalogUrl(q, baseOrOpts = CATALOG_API_BASE) {
+    const opts = typeof baseOrOpts === 'string' ? { base: baseOrOpts } : baseOrOpts;
+    const base = opts.base ?? CATALOG_API_BASE;
+    const params = new URLSearchParams();
+    params.set('types', q.types);
+    const query = q.query?.trim();
+    if (query)
+        params.set('query', query);
+    params.set('limit', String(clampLimit(q.limit ?? DEFAULT_LIMIT)));
+    if (q.cursor)
+        params.set('cursor', q.cursor);
+    if (opts.sfwOnly)
+        params.set('nsfw', 'false');
+    return `${base}?${params.toString()}`;
+}
+function thumbTransformSegment(width) {
+    return `width=${width},optimized=true`;
+}
+/**
+ * Rewrite a Civitai image edge URL to a small, optimized thumbnail so we hit the
+ * CDN-cached variant instead of an origin transcode. Handles `original=true`,
+ * `width=NNN`, or no transform segment. Pure + total — never throws.
+ */
+export function edgeThumb(url, width = THUMB_WIDTH) {
+    if (!url || typeof url !== 'string')
+        return url;
+    const w = Math.max(32, Math.floor(width));
+    const seg = thumbTransformSegment(w);
+    if (/\/original=true\//.test(url))
+        return url.replace(/\/original=true\//, `/${seg}/`);
+    if (/\/width=\d+(?:,[^/]*)?\//.test(url)) {
+        return url.replace(/\/width=\d+(?:,[^/]*)?\//, `/${seg}/`);
+    }
+    if (isCivitaiImageHost(url)) {
+        const lastSlash = url.lastIndexOf('/');
+        if (lastSlash > 0)
+            return `${url.slice(0, lastSlash)}/${seg}${url.slice(lastSlash)}`;
+    }
+    return url;
+}
+/** Civitai image-edge hosts whose URLs we rewrite to a cached thumbnail variant. */
+const CIVITAI_IMAGE_HOSTS = new Set(['image.civitai.com', 'imagecache.civitai.com']);
+/**
+ * True iff `url` is served by a Civitai image-edge HOST. Parses the URL and
+ * checks the exact hostname (not a substring `.includes`, which a crafted URL
+ * like `https://evil.example/image.civitai.com/x` would defeat). Total — a
+ * malformed/relative URL yields `false` (no rewrite).
+ */
+function isCivitaiImageHost(url) {
+    try {
+        return CIVITAI_IMAGE_HOSTS.has(new URL(url).hostname.toLowerCase());
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Strip trailing '/' from a base URL in linear time. Avoids the regex
+ * `/\/+$/` whose backtracking is polynomial (ReDoS) on a long run of slashes.
+ */
+function stripTrailingSlashes(s) {
+    let end = s.length;
+    while (end > 0 && s.charCodeAt(end - 1) === 47 /* '/' */)
+        end -= 1;
+    return s.slice(0, end);
+}
+/**
+ * Map ONE raw model → a card using its FIRST modelVersion (REST default order
+ * puts the latest/primary first) and that version's first image. Returns `null`
+ * for an unusable row (no version id). Tolerant of any missing field.
+ */
+export function modelToCard(raw, imageWidth = THUMB_WIDTH) {
+    if (!raw || typeof raw !== 'object')
+        return null;
+    const version = raw.modelVersions?.[0];
+    const versionId = version?.id;
+    if (typeof versionId !== 'number' || !Number.isFinite(versionId))
+        return null;
+    const modelId = typeof raw.id === 'number' ? raw.id : 0;
+    const firstImage = version?.images?.find((im) => typeof im?.url === 'string' && im.url);
+    return {
+        modelId,
+        versionId,
+        modelName: (raw.name ?? '').trim() || `Model #${modelId || versionId}`,
+        versionName: (version?.name ?? '').trim(),
+        baseModel: (version?.baseModel ?? '').trim(),
+        modelType: (raw.type ?? '').trim(),
+        thumbnailUrl: firstImage?.url ? edgeThumb(firstImage.url, imageWidth) : null,
+        nsfw: raw.nsfw === true,
+    };
+}
+/** Map a full raw response → a page of cards + the next cursor. Never throws. */
+export function responseToPage(raw, imageWidth = THUMB_WIDTH) {
+    const items = Array.isArray(raw?.items) ? raw.items : [];
+    const cards = [];
+    for (const item of items) {
+        const card = modelToCard(item, imageWidth);
+        if (card)
+            cards.push(card);
+    }
+    const nextCursor = raw?.metadata?.nextCursor ?? null;
+    return { cards, nextCursor: typeof nextCursor === 'string' && nextCursor ? nextCursor : null };
+}
+/**
+ * Map a browsed card → the EXACT `BlockCheckpointInfo` shape the production host
+ * returns in `CHECKPOINT_PICKER_RESULT.selected`. Protocol fidelity: the block's
+ * `useCheckpointPicker()` consumes this identically in dev:live and in prod.
+ */
+export function cardToCheckpoint(card) {
+    return {
+        versionId: card.versionId,
+        modelId: card.modelId,
+        modelName: card.modelName,
+        versionName: card.versionName,
+        baseModel: card.baseModel,
+    };
+}
+/**
+ * Map a browsed card → the EXACT `BlockResourceInfo` shape the production host
+ * returns in `RESOURCE_PICKER_RESULT.selected`. `modelType` is the canonical
+ * type the host resolved (e.g. 'Checkpoint' | 'LORA').
+ */
+export function cardToResource(card, modelType) {
+    return {
+        versionId: card.versionId,
+        modelId: card.modelId,
+        modelName: card.modelName,
+        versionName: card.versionName,
+        baseModel: card.baseModel,
+        // Prefer the REST-reported type; fall back to the requested picker type.
+        modelType: card.modelType || modelType,
+    };
+}
+/**
+ * Client-side family hint: keep only cards whose `baseModel` plausibly matches
+ * the requested `baseModelGroup` (ecosystem key like 'Flux1'/'SDXL' OR a
+ * baseModel name like 'Flux.1 D'). Loose substring/token match — the REAL family
+ * constraint is server-enforced at submit; this is purely a dev-UX convenience
+ * that NARROWS the browse, never widens it. An empty/absent group returns the
+ * cards unchanged.
+ */
+export function filterCardsByFamily(cards, baseModelGroup) {
+    const group = baseModelGroup?.trim();
+    if (!group)
+        return cards;
+    const norm = (s) => s.toLowerCase().replace(/[^a-z0-9]/g, '');
+    const needle = norm(group);
+    if (!needle)
+        return cards;
+    const matched = cards.filter((c) => {
+        const hay = norm(c.baseModel);
+        if (!hay)
+            return false;
+        return hay.includes(needle) || needle.includes(hay);
+    });
+    // Don't hand back an empty grid just because the hint was unusual — if nothing
+    // matched, fall back to the full set so the dev can still pick. (Server is the
+    // real constraint at submit.)
+    return matched.length > 0 ? matched : cards;
+}
+/** Statuses that mean "not available yet / not authorized → fall back to public". */
+function isFallbackStatus(status) {
+    return status === 404 || status === 401 || status === 403;
+}
+async function toResult(res, authoritative, imageWidth) {
+    if (!res.ok) {
+        return { kind: 'error', status: res.status, message: `request failed (${res.status})` };
+    }
+    let body;
+    try {
+        body = await res.json();
+    }
+    catch (err) {
+        return {
+            kind: 'error',
+            status: res.status,
+            message: err instanceof Error ? err.message : 'bad JSON',
+        };
+    }
+    const page = responseToPage(body, imageWidth);
+    if (page.cards.length === 0)
+        return { kind: 'empty', authoritative };
+    return { kind: 'ok', page, authoritative };
+}
+/**
+ * Fetch one catalog page, choosing the authoritative (token, maturity-clamped)
+ * or public (advisory-SFW) endpoint and gracefully falling back from the former
+ * to the latter when it isn't deployed / authorized yet (404/401/403) or throws
+ * (CORS/preflight/network). A failure on the PUBLIC path is a hard error (no
+ * infinite loop). Never throws.
+ */
+export async function fetchCatalog(q, deps) {
+    const baseUrl = stripTrailingSlashes(deps.baseUrl);
+    const token = deps.token;
+    const anonSfwOnly = deps.anonSfwOnly !== false;
+    const fetchPublic = async (sfwOnly) => {
+        const url = baseUrl + buildCatalogUrl(q, { base: CATALOG_API_BASE, sfwOnly });
+        try {
+            const res = await deps.fetch(url);
+            return toResult(res, false, deps.imageWidth);
+        }
+        catch (err) {
+            return { kind: 'error', message: err instanceof Error ? err.message : 'network error' };
+        }
+    };
+    // No token: public endpoint, advisory SFW.
+    if (!token)
+        return fetchPublic(anonSfwOnly);
+    // With token: authoritative, server-maturity-clamped endpoint.
+    const authUrl = baseUrl + buildCatalogUrl(q, { base: CATALOG_API_BASE_BLOCKS });
+    let authRes;
+    try {
+        authRes = await deps.fetch(authUrl, { headers: { Authorization: `Bearer ${token}` } });
+    }
+    catch {
+        deps.onFallback?.({ reason: 'network' });
+        return fetchPublic(true);
+    }
+    if (!authRes.ok && isFallbackStatus(authRes.status)) {
+        deps.onFallback?.({ status: authRes.status });
+        return fetchPublic(true);
+    }
+    return toResult(authRes, true, deps.imageWidth);
+}
+//# sourceMappingURL=catalog.js.map

package/dist/internal/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/internal/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAIH,4BAA4B;AAC5B,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEjD,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAK/D,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEhC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAsB/B,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,CAAe,EACf,aAAuC,gBAAgB;IAEvD,MAAM,IAAI,GAAoB,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IACjG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACxC,CAAC;AAiDD,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,SAAS,KAAK,iBAAiB,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,QAAgB,WAAW;IAChE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;IACvF,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,GAAG,CAAC,OAAO,CAAC,0BAA0B,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,SAAS,GAAG,CAAC;YAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAErF;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,CAAS;IACrC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,GAAgC,EAChC,UAAU,GAAG,WAAW;IAExB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,EAAE,EAAE,CAAC;IAC9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACxF,OAAO;QACL,OAAO;QACP,SAAS;QACT,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,UAAU,OAAO,IAAI,SAAS,EAAE;QACtE,WAAW,EAAE,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACzC,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC5C,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAClC,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;QAC5E,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAC5B,GAAmC,EACnC,UAAU,GAAG,WAAW;IAExB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,KAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3C,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI,CAAC;IACrD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAiB;IAChD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiB,EAAE,SAAiB;IACjE,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,yEAAyE;QACzE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,SAAS;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAoB,EACpB,cAAkC;IAElC,MAAM,KAAK,GAAG,cAAc,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,+EAA+E;IAC/E,+EAA+E;IAC/E,8BAA8B;IAC9B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9C,CAAC;AAgBD,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,GAAkE,EAClE,aAAsB,EACtB,UAAmB;IAEnB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAmB,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AAC7C,CAAC;AAeD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,CAAe,EAAE,IAAsB;IACxE,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC;IAE/C,MAAM,WAAW,GAAG,KAAK,EAAE,OAAgB,EAA0B,EAAE;QACrE,MAAM,GAAG,GAAG,OAAO,GAAG,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC;IAEF,2CAA2C;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,WAAW,CAAC,WAAW,CAAC,CAAC;IAE5C,+DAA+D;IAC/D,MAAM,OAAO,GAAG,OAAO,GAAG,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAChF,IAAI,OAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACzC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AAClD,CAAC"}

package/dist/internal/liveHost.d.ts

@@ -31,8 +31,18 @@
  * real compute. The token's per-call budget + the per-user daily cap are the
  * server-side bounds (scope doc §4).
  *
- * SCOPE — live v1 deliberately does NOT support: pickers
- * (OPEN_CHECKPOINT_PICKER / OPEN_RESOURCE_PICKER), SET_USER_CHECKPOINT, the
+ * PICKERS (Phase 1 of "make dev:live a faithful local host"): the live host
+ * SERVES the resource pickers locally. On `OPEN_CHECKPOINT_PICKER` /
+ * `OPEN_RESOURCE_PICKER` it opens an in-harness catalog-browser overlay (real
+ * models fetched with the dev block token via `/api/v1/blocks/models`, public
+ * fallback), the dev picks one, and the host replies with a REAL
+ * `BlockCheckpointInfo` / `BlockResourceInfo` in the EXACT shape the production
+ * host returns — so `useCheckpointPicker` / `useResourcePicker` are byte-identical
+ * in dev:live and in prod (protocol fidelity, not chrome fidelity). A pick is
+ * DISCOVERY ONLY: the server re-validates + prices every id at estimate/submit;
+ * nothing the dev clicks here is trusted or spends Buzz. See the picker handlers.
+ *
+ * SCOPE — live v1 deliberately does NOT support: SET_USER_CHECKPOINT, the
  * App-Storage KV protocol, and an in-band Buzz purchase. Each of those replies
  * with a clearly-labelled "not supported in live v1" outcome (never a fabricated
  * success) and logs once. Use mock mode for those flows, or a later live
@@ -40,6 +50,7 @@
  */
 import { type BlockContext, type ColorDomain, type Theme, type ViewerInfo } from '@civitai/app-sdk/blocks';
 import type { MockHost } from './mockHost.js';
+import { type PickerOverlayHandle } from './pickerOverlay.js';
 /**
  * Options for {@link createLiveHost}. Mirrors the {@link MockHost}-relevant
  * subset of `MockHostOptions`, plus the live-only `blockToken` / `backendBaseUrl`
@@ -82,6 +93,15 @@ export interface LiveHostOptions {
      * Injectable `fetch` (tests pass a mock). Defaults to the global `fetch`.
      */
     fetchImpl?: typeof fetch;
+    /**
+     * TEST SEAM for the in-harness picker overlay. Called with the overlay's
+     * {@link PickerOverlayHandle} once its first catalog page has loaded, on every
+     * `OPEN_CHECKPOINT_PICKER` / `OPEN_RESOURCE_PICKER`. Tests use it to drive a
+     * deterministic selection (`handle.selectFirst()` / `selectByVersionId()`) or
+     * a dismissal (`handle.dismiss()`) without synthesizing DOM clicks. In a real
+     * `dev:live` run this is omitted — the dev clicks a card in the overlay.
+     */
+    onPickerReady?: (handle: PickerOverlayHandle) => void;
 }
 /**
  * Decoded payload of a block-token JWT (the claims `BlockTokenService.sign`

package/dist/internal/liveHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"liveHost.d.ts","sourceRoot":"","sources":["../../src/internal/liveHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,UAAU,EAGhB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,QAAQ,EAAyC,MAAM,eAAe,CAAC;AAKrF;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,wEAAwE;IACxE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,UAAU,CAAC;IACpC;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAYD;;;;;GAKG;AACH,UAAU,wBAAwB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAgB/E;AA6FD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,QAAQ,CA6iBjE"}
+{"version":3,"file":"liveHost.d.ts","sourceRoot":"","sources":["../../src/internal/liveHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,UAAU,EAGhB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,QAAQ,EAAyC,MAAM,eAAe,CAAC;AACrF,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAK5B;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,wEAAwE;IACxE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,UAAU,CAAC;IACpC;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;CACvD;AAWD;;;;;GAKG;AACH,UAAU,wBAAwB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAgB/E;AA6FD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,QAAQ,CAsnBjE"}