@civitai/blocks-react 0.27.0 → 0.28.0

package/README.md

@@ -307,6 +307,21 @@ const { keys } = await storage.list({ prefix: 'note-' });
 const quota = await storage.getQuota();       // { usedBytes, rowCount, limitBytes, limitRows }
 ```
 
+### `useSharedStorage()`
+
+App-scoped, append-only, community-votable SHARED datastore (every viewer sees
+the same list). Sibling of `useAppStorage`; anonymous viewers get the read path
+and a hard reject on mutations.
+
+```tsx
+const shared = useSharedStorage();
+const { key } = await shared.append({ title: 'Add dark mode', body: 'please' });
+const { items } = await shared.list({ limit: 20 });   // newest-first
+const count = await shared.vote(key);                 // idempotent up-vote
+await shared.unvote(key);
+await shared.withdraw(key);                            // remove my own entry
+```
+
 ### `useCheckpointPicker()`
 
 Drive the platform Checkpoint picker + persist a viewer override.
@@ -317,6 +332,55 @@ const { selected } = await open({ baseModelGroup: 'SDXL', currentVersionId });
 if (selected) await persist(selected.versionId);   // null clears the override
 ```
 
+### `useResourcePicker()`
+
+Drive the platform resource picker for page blocks — `'Checkpoint' | 'LORA'`.
+The viewer searches in host chrome; the block only ever sees the one resource it
+picked. DISCOVERY ONLY — the returned `versionId` is re-validated + re-priced
+server-side at estimate/submit.
+
+```tsx
+const { open } = useResourcePicker();
+const picked = await open({ resourceType: 'LORA', baseModelGroup: 'SDXL' });
+if (picked) {
+  const versionId = picked.versionId;   // feed into body.additionalResources
+  const weight = picked.strength;        // recommended default weight (may be undefined)
+}
+```
+
+### `useImageUpload()`
+
+Host-mediated image upload — the host opens its native upload modal and the
+iframe never handles the bytes. Resolves with a moderated image (or `null` on
+dismiss); pass `{ purpose: 'generationSource' }` for an unscanned img2img source
+or `{ asyncScan: true }` for the early-resolve + `scanStatus()` flow.
+
+```tsx
+const { open } = useImageUpload();
+const img = await open();               // BlockUploadedImageInfo | null
+if (img) {
+  await submit({
+    kind: 'textToImage',
+    modelId,
+    modelVersionId,
+    sourceImage: { url: img.url, width: 1024, height: 1024 },
+    params: { prompt },
+  });
+}
+```
+
+### `useGenerationResources()`
+
+Rehydrate a saved set of generation resources by version id — WITHOUT re-opening
+the picker. Returns the same widened projection `useResourcePicker` yields
+(recommended weights, trigger words, clipSkip). DISCOVERY ONLY.
+
+```tsx
+const { fetch } = useGenerationResources();
+const resources = await fetch([691639, 666002]);   // by saved versionIds
+const first = resources[0];             // .versionId / .strength / .trainedWords / .clipSkip
+```
+
 ### `useCivitaiNavigate()`
 
 Request a navigation within civitai.com (host-mediated; fire-and-forget).
@@ -335,6 +399,56 @@ const { track } = useBlockAnalytics();
 track('generate_clicked', { modelId });
 ```
 
+### `useRequestSignIn()`
+
+Ask the host to open its sign-in flow for an ANONYMOUS viewer (fire-and-forget).
+On sign-in the host re-inits the block with the now-authenticated viewer.
+
+```tsx
+const { requestSignIn } = useRequestSignIn();
+// e.g. onClick of a "Sign in to generate" button:
+requestSignIn();
+```
+
+### `useRequestConsent()`
+
+Lazy consent: ask the host to open its consent UI when a LOGGED-IN viewer takes
+an action whose consent-gated scope the block token is missing (e.g. Generate
+needs `ai:write:budgeted` but the viewer hasn't granted it). Fire-and-forget —
+on grant the host pushes a new token; observe `useBlockToken().scopes` and retry.
+
+```tsx
+const { requestConsent } = useRequestConsent();
+requestConsent({ scopes: ['ai:write:budgeted', 'buzz:read:self'] });
+```
+
+### `useDomainMaturity()`
+
+Read the surrounding color-domain's maturity ceiling (civitai #2670) so a block
+can hide/blur mature affordances on a SFW domain. **Fail-closed SFW** until
+`BLOCK_INIT` lands or against a host that predates the field.
+
+```tsx
+const { isSfw, isLevelAllowed } = useDomainMaturity();
+const showRSlider = isLevelAllowed(BrowsingLevel.R);   // false on a SFW domain
+```
+
+### `SfwGate`
+
+Convenience component that renders `children` only when the domain permits the
+maturity — no `level` prop gates on the SFW ceiling, a `level` prop gates on that
+browsing-level bit. Fail-closed SFW.
+
+```tsx
+function MatureSection() {
+  return (
+    <SfwGate level={BrowsingLevel.R} fallback={<SafePlaceholder />}>
+      <RRatedControl />
+    </SfwGate>
+  );
+}
+```
+
 ## The `/ui` subexport
 
 Opinionated components, imported separately so a transport-only block stays lean.
@@ -469,6 +583,9 @@ Runnable, minimal blocks — one per feature, each with its own README:
 
 | `@civitai/blocks-react` | pairs with `@civitai/app-sdk` | adds |
 |---|---|---|
+| `0.27.x` | `^0.23.0` | async-scan image upload; transport validators for all `SHARED_*` / `APP_STORAGE_*` / picker replies |
+| `0.26.x` | `^0.22.0` | `useViewer()` (`GET_VIEWER`) |
+| `0.25.x` | `^0.21.0` | `useBuzzTransactions`, `useBuzzAccounts`, `useDailyCompensation`, `useWildcardPack` |
 | `0.5.0` | `^0.7.0` | `useBuzzWorkflow().cancel()` (real server-side cancel, gotcha #51) |
 | `0.4.x` | `^0.6.0` | `useAppStorage`, `SettingsForm` (`/ui`) |
 | `0.3.x` | `^0.5.0` | earlier hook set |

package/dist/hooks/useBlockToken.d.ts

@@ -20,4 +20,10 @@ import type { BlockToken } from '@civitai/app-sdk/blocks';
 export declare function useBlockToken(): BlockToken & {
     refresh: () => Promise<void>;
 };
+/**
+ * Mint/await a token refresh for one block instance, coalescing concurrent calls
+ * for the SAME `blockInstanceId`. Exported for the inline-mode multi-instance
+ * dedup test — hooks call it via `useBlockToken().refresh`.
+ */
+export declare function requestRefresh(blockInstanceId: string): Promise<void>;
 //# sourceMappingURL=useBlockToken.d.ts.map

package/dist/hooks/useBlockToken.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBlockToken.d.ts","sourceRoot":"","sources":["../../src/hooks/useBlockToken.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAS1D;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,IAAI,UAAU,GAAG;IAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAwB7E"}
+{"version":3,"file":"useBlockToken.d.ts","sourceRoot":"","sources":["../../src/hooks/useBlockToken.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAS1D;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,IAAI,UAAU,GAAG;IAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAwB7E;AAiBD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe3E"}

package/dist/hooks/useBlockToken.js

@@ -47,22 +47,35 @@ export function useBlockToken() {
     return { ...token, refresh: () => requestRefresh(instanceId) };
 }
 /**
- * In-flight dedup. Both the scheduled-timeout path and the "already past"
- * synchronous path can fire while a previous refresh is still pending —
- * coalescing into a single round-trip avoids fanning out duplicate
- * REQUEST_TOKEN messages, which would otherwise hit the host once per
+ * In-flight dedup, keyed by `blockInstanceId`. Both the scheduled-timeout path
+ * and the "already past" synchronous path can fire while a previous refresh is
+ * still pending — coalescing into a single round-trip avoids fanning out
+ * duplicate REQUEST_TOKEN messages, which would otherwise hit the host once per
  * snapshot update.
+ *
+ * The key MUST include `blockInstanceId`: in iframe mode there is one module per
+ * iframe so any key works, but on the INLINE transport (v2) several block
+ * instances share one module context. A module-global singleton would coalesce
+ * across instances, so instance B's 401-retry `refresh()` would resolve on
+ * instance A's in-flight `REQUEST_TOKEN` and B would never mint its OWN token.
+ */
+const inFlightRefreshByInstance = new Map();
+/**
+ * Mint/await a token refresh for one block instance, coalescing concurrent calls
+ * for the SAME `blockInstanceId`. Exported for the inline-mode multi-instance
+ * dedup test — hooks call it via `useBlockToken().refresh`.
  */
-let inFlightRefresh = null;
-async function requestRefresh(blockInstanceId) {
-    if (inFlightRefresh)
-        return inFlightRefresh;
+export async function requestRefresh(blockInstanceId) {
+    const existing = inFlightRefreshByInstance.get(blockInstanceId);
+    if (existing)
+        return existing;
     const transport = getTransport();
-    inFlightRefresh = sendTypedRequest(transport, { type: 'REQUEST_TOKEN', payload: { blockInstanceId } }, 'TOKEN_REFRESH_RESPONSE')
+    const refresh = sendTypedRequest(transport, { type: 'REQUEST_TOKEN', payload: { blockInstanceId } }, 'TOKEN_REFRESH_RESPONSE')
         .then(() => undefined)
         .finally(() => {
-        inFlightRefresh = null;
+        inFlightRefreshByInstance.delete(blockInstanceId);
     });
-    return inFlightRefresh;
+    inFlightRefreshByInstance.set(blockInstanceId, refresh);
+    return refresh;
 }
 //# sourceMappingURL=useBlockToken.js.map

package/dist/hooks/useBlockToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBlockToken.js","sourceRoot":"","sources":["../../src/hooks/useBlockToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAIlC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,sEAAsE;AACtE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC;IAExC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;QAChF,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;YACxB,iDAAiD;YACjD,oEAAoE;YACpE,6CAA6C;YAC7C,cAAc,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,oEAAoE;YACpE,6CAA6C;YAC7C,cAAc,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7C,CAAC,EAAE,cAAc,CAAC,CAAC;QACnB,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAE9C,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,IAAI,eAAe,GAAyB,IAAI,CAAC;AAEjD,KAAK,UAAU,cAAc,CAAC,eAAuB;IACnD,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAC5C,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,eAAe,GAAG,gBAAgB,CAChC,SAAS,EACT,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,EAAE,EACvD,wBAAwB,CACzB;SACE,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;SACrB,OAAO,CAAC,GAAG,EAAE;QACZ,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC,CAAC,CAAC;IACL,OAAO,eAAe,CAAC;AACzB,CAAC"}
+{"version":3,"file":"useBlockToken.js","sourceRoot":"","sources":["../../src/hooks/useBlockToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAIlC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,sEAAsE;AACtE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC;IAExC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;QAChF,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;YACxB,iDAAiD;YACjD,oEAAoE;YACpE,6CAA6C;YAC7C,cAAc,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,oEAAoE;YACpE,6CAA6C;YAC7C,cAAc,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7C,CAAC,EAAE,cAAc,CAAC,CAAC;QACnB,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAE9C,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,eAAuB;IAC1D,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAChE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,gBAAgB,CAC9B,SAAS,EACT,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,EAAE,EACvD,wBAAwB,CACzB;SACE,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;SACrB,OAAO,CAAC,GAAG,EAAE;QACZ,yBAAyB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACL,yBAAyB,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/hooks/useGenerationResources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useGenerationResources.d.ts","sourceRoot":"","sources":["../../src/hooks/useGenerationResources.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AASjE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,IAAI;IACxC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;CAC/D,CAyBA"}
+{"version":3,"file":"useGenerationResources.d.ts","sourceRoot":"","sources":["../../src/hooks/useGenerationResources.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAiBjE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,IAAI;IACxC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;CAC/D,CA0DA"}

package/dist/hooks/useGenerationResources.js

@@ -1,7 +1,14 @@
-import { useCallback } from 'react';
+import { useCallback, useEffect, useRef } from 'react';
 import { buildGenerationResourcesUrl, responseToResources, } from '../api/generationResources.js';
 import { useHostOrigin } from './useHostOrigin.js';
 import { useBlockToken } from './useBlockToken.js';
+/**
+ * Backstop timeout for the direct REST fetch. Unlike the postMessage hooks
+ * (which inherit the transport's 30s request timeout), this hook talks to the
+ * HTTP API directly, so it needs its OWN bound — otherwise a hung request never
+ * rejects. Matches the transport's default request timeout.
+ */
+const GENERATION_RESOURCES_TIMEOUT_MS = 30_000;
 /**
  * Rehydrate a saved set of generation resources by version id, WITHOUT
  * re-opening the resource picker. `fetch(versionIds)` GETs the block-token-gated
@@ -27,19 +34,49 @@ import { useBlockToken } from './useBlockToken.js';
 export function useGenerationResources() {
     const host = useHostOrigin();
     const { raw } = useBlockToken();
+    // In-flight AbortControllers, aborted on unmount so a pending fetch never
+    // resolves into an unmounted component (and its timer is cleared).
+    const inFlight = useRef(new Set());
+    useEffect(() => {
+        const controllers = inFlight.current;
+        return () => {
+            for (const c of controllers)
+                c.abort();
+            controllers.clear();
+        };
+    }, []);
     const doFetch = useCallback(async (versionIds) => {
         if (!host) {
             throw new Error('useGenerationResources: host origin not established yet (wait for BLOCK_INIT).');
         }
         const url = host + buildGenerationResourcesUrl(versionIds);
-        const res = await fetch(url, {
-            headers: { Authorization: `Bearer ${raw}` },
-        });
-        if (!res.ok) {
-            throw new Error(`generation-resources request failed (${res.status})`);
+        const controller = new AbortController();
+        inFlight.current.add(controller);
+        const timeoutId = setTimeout(() => controller.abort(), GENERATION_RESOURCES_TIMEOUT_MS);
+        try {
+            const res = await fetch(url, {
+                headers: { Authorization: `Bearer ${raw}` },
+                signal: controller.signal,
+            });
+            if (!res.ok) {
+                throw new Error(`generation-resources request failed (${res.status})`);
+            }
+            const body = (await res.json());
+            return responseToResources(body);
+        }
+        catch (err) {
+            // Distinguish an abort (timeout OR unmount) from a real network/HTTP
+            // failure so the caller gets an actionable message instead of a bare
+            // DOMException.
+            if (controller.signal.aborted) {
+                throw new Error(`useGenerationResources: request aborted (timed out after ${GENERATION_RESOURCES_TIMEOUT_MS}ms or the hook unmounted).`);
+            }
+            throw err;
+        }
+        finally {
+            clearTimeout(timeoutId);
+            inFlight.current.delete(controller);
         }
-        const body = (await res.json());
-        return responseToResources(body);
     }, [host, raw]);
     return { fetch: doFetch };
 }

package/dist/hooks/useGenerationResources.js.map

@@ -1 +1 @@
-{"version":3,"file":"useGenerationResources.js","sourceRoot":"","sources":["../../src/hooks/useGenerationResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAIpC,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,sBAAsB;IAGpC,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;IAEhC,MAAM,OAAO,GAAG,WAAW,CACzB,KAAK,EAAE,UAAoB,EAAgC,EAAE;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;QAC3C,OAAO,mBAAmB,CAAC,IAAiD,CAAC,CAAC;IAChF,CAAC,EACD,CAAC,IAAI,EAAE,GAAG,CAAC,CACZ,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"useGenerationResources.js","sourceRoot":"","sources":["../../src/hooks/useGenerationResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAIvD,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,+BAA+B,GAAG,MAAM,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,sBAAsB;IAGpC,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;IAEhC,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAuB,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC;QACrC,OAAO,GAAG,EAAE;YACV,KAAK,MAAM,CAAC,IAAI,WAAW;gBAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YACvC,WAAW,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,OAAO,GAAG,WAAW,CACzB,KAAK,EAAE,UAAoB,EAAgC,EAAE;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,UAAU,CAC1B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,+BAA+B,CAChC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;gBAC3C,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;YAC3C,OAAO,mBAAmB,CAAC,IAAiD,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,qEAAqE;YACrE,gBAAgB;YAChB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CACb,4DAA4D,+BAA+B,4BAA4B,CACxH,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,EACD,CAAC,IAAI,EAAE,GAAG,CAAC,CACZ,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC"}

package/dist/internal/liveHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"liveHost.d.ts","sourceRoot":"","sources":["../../src/internal/liveHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,UAAU,EAGhB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,QAAQ,EAAyC,MAAM,eAAe,CAAC;AACrF,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAK5B;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,wEAAwE;IACxE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,UAAU,CAAC;IACpC;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;CACvD;AAQD;;;;;GAKG;AACH,UAAU,wBAAwB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAgB/E;AAyHD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,QAAQ,CAg9BjE"}
+{"version":3,"file":"liveHost.d.ts","sourceRoot":"","sources":["../../src/internal/liveHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,UAAU,EAGhB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,QAAQ,EAAyC,MAAM,eAAe,CAAC;AACrF,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAK5B;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,wEAAwE;IACxE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,UAAU,CAAC;IACpC;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;CACvD;AAQD;;;;;GAKG;AACH,UAAU,wBAAwB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAgB/E;AAyHD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,QAAQ,CAssCjE"}

package/dist/internal/liveHost.js

@@ -727,6 +727,23 @@ export function createLiveHost(options) {
                         }, 'RESOURCE_PICKER_RESULT', requestId ?? '');
                         return;
                     }
+                    case 'OPEN_IMAGE_UPLOAD': {
+                        // No headless upload contract: the real image-upload flow needs the
+                        // host's native modal + the session-authed byte pipeline, neither of
+                        // which the dev harness has. Rather than let `useImageUpload()` hang
+                        // to its 10-minute picker timeout, reply DISMISSED (no `selected`, so
+                        // the hook resolves to `null`) and log an actionable message. Honest-
+                        // by-design — never fabricate a moderated image id. Mirrors the
+                        // OPEN_BUZZ_PURCHASE "no headless contract" pattern.
+                        logOnce('open-image-upload', 'OPEN_IMAGE_UPLOAD received but live dev mode cannot serve the native upload ' +
+                            'modal — resolving the upload as dismissed (null). Test the image-upload flow ' +
+                            'against the real site, or use createMockHost({ cannedImageUpload }) in dev:mock.');
+                        dispatchToBlock({
+                            type: 'IMAGE_UPLOAD_RESULT',
+                            payload: { requestId: requestId ?? '' },
+                        });
+                        return;
+                    }
                     case 'SET_USER_CHECKPOINT': {
                         // FORWARD (faithful) to blocks.updateUserSettings — never fabricate.
                         // Mirror the prod IframeHost's versionId validation: a number or an
@@ -915,6 +932,192 @@ export function createLiveHost(options) {
                         });
                         return;
                     }
+                    // ---- SHARED (cross-user, votable) storage ----
+                    // FORWARD the eight `SHARED_*` bridges to the block-token
+                    // `apps.shared.{list,getCount,getCounts,append,update,vote,unvote,
+                    // withdraw}` procedures (reads GET, mutations POST — FLAT
+                    // `{ blockToken, … }` input, same convention as apps.storage.*). Reads
+                    // need the `apps:storage:shared:read` scope, writes
+                    // `apps:storage:shared:write`; the dev token carries whatever the local
+                    // manifest declared and the server enforces. Without these,
+                    // `useSharedStorage()` hung to its 30s timeout in dev:live.
+                    case 'SHARED_LIST': {
+                        const rawLimit = typed.payload?.limit;
+                        const limit = typeof rawLimit === 'number'
+                            ? Math.min(Math.max(Math.floor(rawLimit), 1), 100)
+                            : 50;
+                        const listInput = { blockToken: rawToken, limit };
+                        if (typeof typed.payload?.prefix === 'string')
+                            listInput.prefix = typed.payload.prefix;
+                        if (typeof typed.payload?.cursor === 'string')
+                            listInput.cursor = typed.payload.cursor;
+                        void callTrpcData('apps.shared.list', listInput, 'GET').then((r) => {
+                            if (r.error) {
+                                dispatchToBlock({
+                                    type: 'SHARED_LIST_RESULT',
+                                    payload: { requestId: requestId ?? '', items: [], error: r.error },
+                                });
+                                return;
+                            }
+                            const rawItems = r.data?.items;
+                            const items = (Array.isArray(rawItems) ? rawItems : []).map((it) => {
+                                const e = it;
+                                const iso = (d) => d instanceof Date ? d.toISOString() : String(d);
+                                return {
+                                    key: String(e.key),
+                                    authorUserId: typeof e.authorUserId === 'number' ? e.authorUserId : 0,
+                                    value: e.value,
+                                    count: typeof e.count === 'number' ? e.count : 0,
+                                    createdAt: iso(e.createdAt),
+                                    updatedAt: iso(e.updatedAt),
+                                };
+                            });
+                            const nextCursor = r.data?.nextCursor;
+                            dispatchToBlock({
+                                type: 'SHARED_LIST_RESULT',
+                                payload: {
+                                    requestId: requestId ?? '',
+                                    items,
+                                    ...(typeof nextCursor === 'string' && nextCursor.length > 0
+                                        ? { nextCursor }
+                                        : {}),
+                                },
+                            });
+                        });
+                        return;
+                    }
+                    case 'SHARED_GET_COUNT': {
+                        const key = typed.payload?.key ?? '';
+                        void callTrpcData('apps.shared.getCount', { blockToken: rawToken, key }, 'GET').then((r) => {
+                            if (r.error) {
+                                dispatchToBlock({
+                                    type: 'SHARED_GET_COUNT_RESULT',
+                                    payload: { requestId: requestId ?? '', count: 0, error: r.error },
+                                });
+                                return;
+                            }
+                            const count = r.data?.count;
+                            dispatchToBlock({
+                                type: 'SHARED_GET_COUNT_RESULT',
+                                payload: { requestId: requestId ?? '', count: typeof count === 'number' ? count : 0 },
+                            });
+                        });
+                        return;
+                    }
+                    case 'SHARED_GET_COUNTS': {
+                        const keys = Array.isArray(typed.payload?.keys) ? typed.payload.keys : [];
+                        void callTrpcData('apps.shared.getCounts', { blockToken: rawToken, keys }, 'GET').then((r) => {
+                            if (r.error) {
+                                dispatchToBlock({
+                                    type: 'SHARED_GET_COUNTS_RESULT',
+                                    payload: { requestId: requestId ?? '', counts: {}, error: r.error },
+                                });
+                                return;
+                            }
+                            const counts = r.data?.counts;
+                            dispatchToBlock({
+                                type: 'SHARED_GET_COUNTS_RESULT',
+                                payload: {
+                                    requestId: requestId ?? '',
+                                    counts: (counts && typeof counts === 'object' ? counts : {}),
+                                },
+                            });
+                        });
+                        return;
+                    }
+                    case 'SHARED_APPEND': {
+                        const value = typed.payload?.value;
+                        void callTrpcData('apps.shared.append', { blockToken: rawToken, value }, 'POST').then((r) => {
+                            if (r.error) {
+                                dispatchToBlock({
+                                    type: 'SHARED_APPEND_RESULT',
+                                    payload: { requestId: requestId ?? '', key: '', error: r.error },
+                                });
+                                return;
+                            }
+                            const key = r.data?.key;
+                            dispatchToBlock({
+                                type: 'SHARED_APPEND_RESULT',
+                                payload: { requestId: requestId ?? '', key: String(key ?? '') },
+                            });
+                        });
+                        return;
+                    }
+                    case 'SHARED_UPDATE': {
+                        const key = typed.payload?.key ?? '';
+                        const value = typed.payload?.value;
+                        void callTrpcData('apps.shared.update', { blockToken: rawToken, key, value }, 'POST').then((r) => {
+                            dispatchToBlock({
+                                type: 'SHARED_UPDATE_RESULT',
+                                payload: r.error
+                                    ? { requestId: requestId ?? '', ok: false, error: r.error }
+                                    : { requestId: requestId ?? '', ok: true },
+                            });
+                        });
+                        return;
+                    }
+                    case 'SHARED_VOTE': {
+                        const key = typed.payload?.key ?? '';
+                        void callTrpcData('apps.shared.vote', { blockToken: rawToken, key }, 'POST').then((r) => {
+                            if (r.error) {
+                                dispatchToBlock({
+                                    type: 'SHARED_VOTE_RESULT',
+                                    payload: { requestId: requestId ?? '', count: 0, error: r.error },
+                                });
+                                return;
+                            }
+                            const count = r.data?.count;
+                            dispatchToBlock({
+                                type: 'SHARED_VOTE_RESULT',
+                                payload: { requestId: requestId ?? '', count: typeof count === 'number' ? count : 0 },
+                            });
+                        });
+                        return;
+                    }
+                    case 'SHARED_UNVOTE': {
+                        const key = typed.payload?.key ?? '';
+                        void callTrpcData('apps.shared.unvote', { blockToken: rawToken, key }, 'POST').then((r) => {
+                            if (r.error) {
+                                dispatchToBlock({
+                                    type: 'SHARED_UNVOTE_RESULT',
+                                    payload: { requestId: requestId ?? '', count: 0, error: r.error },
+                                });
+                                return;
+                            }
+                            const count = r.data?.count;
+                            dispatchToBlock({
+                                type: 'SHARED_UNVOTE_RESULT',
+                                payload: { requestId: requestId ?? '', count: typeof count === 'number' ? count : 0 },
+                            });
+                        });
+                        return;
+                    }
+                    case 'SHARED_WITHDRAW': {
+                        const key = typed.payload?.key ?? '';
+                        void callTrpcData('apps.shared.withdraw', { blockToken: rawToken, key }, 'POST').then((r) => {
+                            if (r.error) {
+                                dispatchToBlock({
+                                    type: 'SHARED_WITHDRAW_RESULT',
+                                    payload: {
+                                        requestId: requestId ?? '',
+                                        ok: false,
+                                        deleted: false,
+                                        error: r.error,
+                                    },
+                                });
+                                return;
+                            }
+                            dispatchToBlock({
+                                type: 'SHARED_WITHDRAW_RESULT',
+                                payload: {
+                                    requestId: requestId ?? '',
+                                    ok: true,
+                                    deleted: Boolean(r.data?.deleted),
+                                },
+                            });
+                        });
+                        return;
+                    }
                     case 'NAVIGATE': {
                         const path = typed.payload?.path ?? '';
                         const target = typed.payload?.target ?? 'current';