@civitai/blocks-react 0.39.0 → 0.41.0

package/README.md

@@ -27,7 +27,7 @@ your block app and the SDK share a single React tree.
 import { useRef } from 'react';
 import { useBlockContext, useBlockResize, useBuzzWorkflow } from '@civitai/blocks-react';
 import { Button } from '@civitai/blocks-react/ui';
-import type { ModelSlotContext } from '@civitai/app-sdk/blocks';
+import { isModelSlotContext } from '@civitai/app-sdk/blocks';
 
 export function App() {
   const { ready, context, viewer, theme } = useBlockContext();
@@ -36,21 +36,22 @@ export function App() {
   useBlockResize(rootRef);                 // host fits the iframe to content
 
   if (!ready) return <div ref={rootRef}>Loading…</div>;
-  const model = context as ModelSlotContext;
+  // `context` is a union keyed on slotId — narrow with the guard, not a cast.
+  if (!isModelSlotContext(context)) return <div ref={rootRef}>Wrong slot.</div>;
 
   return (
     // GOTCHA #60: set data-theme on YOUR OWN root — the host can't reach into
     // the iframe to set it. Without this any [data-theme="dark"] CSS is dormant.
     <div ref={rootRef} data-theme={theme}>
-      <p>Block for model {model.modelName} ({viewer?.username ?? 'anon'})</p>
+      <p>Block for model {context.modelName} ({viewer ? 'signed in' : 'anon'})</p>
       {/* `/ui` Button — themed by the data-theme above; `loading` disables + shows a spinner */}
       <Button
         loading={status === 'submitting' || status === 'polling'}
         onClick={() =>
           submit({
             kind: 'textToImage',
-            modelId: model.modelId,
-            modelVersionId: model.modelVersionId,
+            modelId: context.modelId,
+            modelVersionId: context.modelVersionId,
             params: { prompt: 'a cat' },
           })
         }
@@ -112,8 +113,35 @@ const { ready, context, viewer, theme, settings, blockId, blockInstanceId, appId
   model-page slots.
 - `viewer` — `ViewerInfo | null` (`null` = anonymous).
 - `theme` — `'light' | 'dark'`. **Set `data-theme={theme}` on your root** (gotcha #60).
+  LIVE: it starts at the `BLOCK_INIT` value and then tracks the host's
+  `THEME_CHANGE` push when the viewer toggles dark mode mid-session — see
+  [`useBlockTheme()`](#useblocktheme).
 - `settings` — `{ publisherSettings, userSettings }`.
 
+### `useBlockTheme()`
+
+The host's CURRENT site theme, and nothing else. Same value as
+`useBlockContext().theme` — reach for this when theme is all you need.
+
+```tsx
+function ThemedRoot() {
+  const theme = useBlockTheme(); // 'light' | 'dark'
+  return <div data-theme={theme}>…</div>;
+}
+```
+
+The viewer can toggle light/dark **while your block is mounted**. The host pushes
+a `THEME_CHANGE` message and this hook re-renders. You get that for free as long
+as you *read* the theme on every render — a block that copies it into state once
+at mount, or writes `data-theme` imperatively in a mount-only effect, will stay
+stuck on the old theme.
+
+Against a host that predates `THEME_CHANGE` the value simply never moves (the
+old behaviour). Nothing awaits the message, so there is no hang either way.
+
+Exercise it locally: `createMockHost(...).setTheme('light')` (and the same on the
+`dev:live` host) pushes the real message.
+
 ### `useBlockResize(ref)`
 
 Attach to your root element. Observes its height and posts `RESIZE_IFRAME` so the
@@ -474,10 +502,109 @@ needs `ai:write:budgeted` but the viewer hasn't granted it). Fire-and-forget —
 on grant the host pushes a new token; observe `useBlockToken().scopes` and retry.
 
 ```tsx
+import { useRequestConsent } from '@civitai/blocks-react';
+
 const { requestConsent } = useRequestConsent();
 requestConsent({ scopes: ['ai:write:budgeted', 'buzz:read:self'] });
 ```
 
+🔴 **Always pass `scopes`, with a real scope name in it — it is optional in the
+signature but a precondition for the refusal path below.** The host grants the
+missing set it computed at mint, so a bare `requestConsent()` still opens the
+consent dialog. But `CONSENT_UNAVAILABLE` is computed *from the hint*: with no
+explicit scope proven un-grantable, the host cannot tell "can never be granted"
+from "the viewer hasn't confirmed yet", so it stays silent rather than guess.
+
+The bar is an array holding **at least one non-empty string** — not merely "an
+array is present". `undefined`, a non-array, `[]`, `['']` and `[1, 2]` all
+produce silence, in `pnpm dev` and in production alike, so
+`requestConsent({ scopes: [] })` follows the instruction and still receives
+nothing. To its author that reads as a broken message rather than a thin
+argument.
+
+### `useConsentUnavailable()`
+
+Some environments withhold a scope at mint (a dev-tunnel preview token, a surface
+that carries no money scope), so no consent round-trip can ever add it. The host
+then pushes an uncorrelated `CONSENT_UNAVAILABLE` — *not* a reply, because
+`REQUEST_CONSENT` carries no `requestId`. Consume it and stop telling the user to
+retry something that can't succeed:
+
+```tsx
+import { useConsentUnavailable, useRequestConsent } from '@civitai/blocks-react';
+
+function ConsentAwareGenerate() {
+  const { requestConsent } = useRequestConsent();
+  const { refusal, reset } = useConsentUnavailable();
+
+  // 🔴 Branch on `refusal !== null`, NEVER on `refusal.scopes.length`. The host
+  // refuses on its own unfiltered set but names only scopes in the public
+  // vocabulary, so `scopes: []` is a legitimate refusal — gating on the length
+  // silently drops the very message you subscribed for. Use the names for copy.
+  if (refusal) {
+    return (
+      <div>
+        <p>Generating isn't available on this page.</p>
+        <button onClick={reset}>Try again</button>
+      </div>
+    );
+  }
+  // 🔴 `scopes` is REQUIRED for a refusal to ever arrive — see above.
+  return <button onClick={() => requestConsent({ scopes: ['ai:write:budgeted'] })}>Generate</button>;
+}
+```
+
+`refusal` holds the latest `ConsentUnavailablePayload` (`{ reason, scopes }`) or
+`null`; `reset()` clears it, since a refusal is scoped to the scopes that were
+asked for and shouldn't latch for the life of the block. Against a host that
+never sends the message the hook simply stays `null` — nothing awaits it, so
+there is no timeout to hit.
+
+🔴 **The push is UNCORRELATED, and that is the permanent shape of this API.**
+`REQUEST_CONSENT` carries no `requestId`, so a refusal cannot be matched to the
+request that provoked it. Two consequences to design around:
+
+- **Every mounted `useConsentUnavailable()` sees every refusal.** There is no
+  reliable filter: `scopes` is advisory and may legitimately be `[]`, so it
+  cannot serve as a correlation key. If two independent parts of your block
+  request different scopes, both will see both refusals. Keep a request and its
+  refusal UI in one component, or track the outstanding request yourself.
+- **A refusal is buffered across mounts, so one that arrives while the consumer
+  is unmounted is not lost.** The transport hands an unsolicited push only to
+  handlers registered at the instant it arrives, so without this a refusal that
+  landed before the consumer mounted — the requester and the consumer being
+  different components, or the consumer being conditionally rendered — vanished,
+  and the block went back to showing "click Generate again" beside the host's
+  "unavailable". `requestConsent()` arms the buffer as it sends. It keeps only
+  the latest refusal, is dropped when the block token changes (a refusal is a
+  claim about *that* token's scopes, and the grant path re-mints), and is cleared
+  by `reset()` — so the "Try again" button above genuinely resets, rather than
+  having the refusal reappear on the next mount. A `REQUEST_CONSENT` you post
+  through the raw transport instead of the hook does not arm it.
+
+Without the hook (a non-React consumer, or one wiring the transport directly),
+the same push is available untyped — note the explicit type import, which the
+cast needs and which the hook makes unnecessary:
+
+```tsx
+import { getTransport } from '@civitai/blocks-react';
+import type { ConsentUnavailablePayload } from '@civitai/app-sdk/blocks';
+
+const unsubscribe = getTransport().onMessage('CONSENT_UNAVAILABLE', (payload) => {
+  // `onMessage` hands you `unknown`; this cast is UNCHECKED, which is why
+  // `useConsentUnavailable()` is the preferred path.
+  const { reason, scopes } = payload as ConsentUnavailablePayload;
+  console.info('permission unavailable', reason, scopes);
+});
+```
+
+To exercise the refusal locally, run the mock host with
+`createMockHost({ consentGrantable: false })`, flip it live with
+`host.setScenario({ consentGrantable: false })`, or append `?consent=ungrantable`
+to the dev harness URL — the `<Harness>` chrome then reads `consent=ungrantable`
+rather than `withheld`. `dev:live` emits it too: live mode can grant nothing, so
+any request for a scope your dev token lacks produces one.
+
 ### `useDomainMaturity()`
 
 Read the surrounding color-domain's maturity ceiling (civitai #2670) so a block

package/dist/hooks/useBlockContext.d.ts

@@ -18,6 +18,12 @@ declare function useTransportSnapshot(): BlockSnapshot;
  * set `data-theme={theme}` on your root, gotcha #60), `blockId`,
  * `blockInstanceId`, and `appId`.
  *
+ * `theme` is LIVE: it starts at the `BLOCK_INIT` (or URL-fragment) value and
+ * then tracks the host's `THEME_CHANGE` push when the viewer toggles light/dark
+ * mid-session. Reading it here is enough — {@link useBlockTheme} is the same
+ * value, narrower. Against a host that never pushes it, the value simply never
+ * moves (today's behaviour).
+ *
  * @example
  * const { ready, context, viewer, theme, settings } = useBlockContext();
  * if (!ready) return <div>Loading…</div>;

package/dist/hooks/useBlockContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBlockContext.d.ts","sourceRoot":"","sources":["../../src/hooks/useBlockContext.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D;;;GAGG;AACH,iBAAS,oBAAoB,IAAI,aAAa,CAS7C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,IAAI,IAAI,CACrC,aAAa,EACX,OAAO,GACP,YAAY,GACZ,SAAS,GACT,OAAO,GACP,UAAU,GACV,QAAQ,GACR,OAAO,GACP,SAAS,GACT,iBAAiB,GACjB,OAAO,CACV,CAcA;AAED,6EAA6E;AAC7E,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"useBlockContext.d.ts","sourceRoot":"","sources":["../../src/hooks/useBlockContext.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D;;;GAGG;AACH,iBAAS,oBAAoB,IAAI,aAAa,CAS7C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,eAAe,IAAI,IAAI,CACrC,aAAa,EACX,OAAO,GACP,YAAY,GACZ,SAAS,GACT,OAAO,GACP,UAAU,GACV,QAAQ,GACR,OAAO,GACP,SAAS,GACT,iBAAiB,GACjB,OAAO,CACV,CAcA;AAED,6EAA6E;AAC7E,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/hooks/useBlockContext.js

@@ -25,6 +25,12 @@ function useTransportSnapshot() {
  * set `data-theme={theme}` on your root, gotcha #60), `blockId`,
  * `blockInstanceId`, and `appId`.
  *
+ * `theme` is LIVE: it starts at the `BLOCK_INIT` (or URL-fragment) value and
+ * then tracks the host's `THEME_CHANGE` push when the viewer toggles light/dark
+ * mid-session. Reading it here is enough — {@link useBlockTheme} is the same
+ * value, narrower. Against a host that never pushes it, the value simply never
+ * moves (today's behaviour).
+ *
  * @example
  * const { ready, context, viewer, theme, settings } = useBlockContext();
  * if (!ready) return <div>Loading…</div>;

package/dist/hooks/useBlockContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBlockContext.js","sourceRoot":"","sources":["../../src/hooks/useBlockContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,OAAO,oBAAoB,CACzB,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAC/B,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE;IAC7B,iEAAiE;IACjE,mEAAmE;IACnE,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe;IAa7B,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"useBlockContext.js","sourceRoot":"","sources":["../../src/hooks/useBlockContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,OAAO,oBAAoB,CACzB,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAC/B,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE;IAC7B,iEAAiE;IACjE,mEAAmE;IACnE,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,eAAe;IAa7B,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/hooks/useBlockTheme.d.ts

@@ -0,0 +1,39 @@
+import type { Theme } from '@civitai/app-sdk/blocks';
+/**
+ * The host's CURRENT site theme (`'light' | 'dark'`), kept live for the whole
+ * life of the block ON THE IFRAME TRANSPORT.
+ *
+ * Reads the SAME singleton transport snapshot {@link useBlockContext} does, so
+ * it re-renders when the value changes. Three things can set it, in increasing
+ * order of authority:
+ *
+ *  1. the iframe URL fragment fast path (`#civitai-block=v1&theme=…`), read
+ *     synchronously at construction, BEFORE any message — this is why a block
+ *     can paint its first frame in the right theme;
+ *  2. `BLOCK_INIT` (authoritative — replaces the whole snapshot);
+ *  3. `THEME_CHANGE`, the host's push when the viewer toggles light/dark WHILE
+ *     the block is mounted. Without it a mounted block kept its mount-time
+ *     theme until reloaded: `BLOCK_INIT` is deduped by the transport and the
+ *     URL fragment is frozen at mount, so neither can carry a later value.
+ *
+ * BEFORE `BLOCK_INIT` (and with no fragment) this returns the snapshot's
+ * `'light'` sentinel, exactly like `useBlockContext().theme`. Gate first paint
+ * on `useBlockContext().ready` if that matters to you.
+ *
+ * 🔴 OLD HOST: a host that never sends `THEME_CHANGE` simply never moves the
+ * value — the hook degrades to today's mount-time-constant behaviour. Nothing
+ * here awaits a message, so there is no hang and no timeout.
+ *
+ * 🔴 INLINE TRANSPORT: the value is FROZEN at the bootstrap theme. v1 inline
+ * mode receives no host pushes at all (`InlineTransport.onMessage` is a stub and
+ * `subscribe` is a no-op, so nothing can emit), exactly the way
+ * {@link useBlockResize} is a no-op there. Same degradation as an old host —
+ * correct first paint, no live toggle — and it lifts when v2 inline mode lands.
+ *
+ * @example
+ * // The host cannot reach into your iframe's DOM — put the theme on YOUR root.
+ * const theme = useBlockTheme();
+ * return <div data-theme={theme}>…</div>;
+ */
+export declare function useBlockTheme(): Theme;
+//# sourceMappingURL=useBlockTheme.d.ts.map

package/dist/hooks/useBlockTheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useBlockTheme.d.ts","sourceRoot":"","sources":["../../src/hooks/useBlockTheme.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAIrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,aAAa,IAAI,KAAK,CAErC"}

package/dist/hooks/useBlockTheme.js

@@ -0,0 +1,41 @@
+import { useTransportSnapshot } from './useBlockContext.js';
+/**
+ * The host's CURRENT site theme (`'light' | 'dark'`), kept live for the whole
+ * life of the block ON THE IFRAME TRANSPORT.
+ *
+ * Reads the SAME singleton transport snapshot {@link useBlockContext} does, so
+ * it re-renders when the value changes. Three things can set it, in increasing
+ * order of authority:
+ *
+ *  1. the iframe URL fragment fast path (`#civitai-block=v1&theme=…`), read
+ *     synchronously at construction, BEFORE any message — this is why a block
+ *     can paint its first frame in the right theme;
+ *  2. `BLOCK_INIT` (authoritative — replaces the whole snapshot);
+ *  3. `THEME_CHANGE`, the host's push when the viewer toggles light/dark WHILE
+ *     the block is mounted. Without it a mounted block kept its mount-time
+ *     theme until reloaded: `BLOCK_INIT` is deduped by the transport and the
+ *     URL fragment is frozen at mount, so neither can carry a later value.
+ *
+ * BEFORE `BLOCK_INIT` (and with no fragment) this returns the snapshot's
+ * `'light'` sentinel, exactly like `useBlockContext().theme`. Gate first paint
+ * on `useBlockContext().ready` if that matters to you.
+ *
+ * 🔴 OLD HOST: a host that never sends `THEME_CHANGE` simply never moves the
+ * value — the hook degrades to today's mount-time-constant behaviour. Nothing
+ * here awaits a message, so there is no hang and no timeout.
+ *
+ * 🔴 INLINE TRANSPORT: the value is FROZEN at the bootstrap theme. v1 inline
+ * mode receives no host pushes at all (`InlineTransport.onMessage` is a stub and
+ * `subscribe` is a no-op, so nothing can emit), exactly the way
+ * {@link useBlockResize} is a no-op there. Same degradation as an old host —
+ * correct first paint, no live toggle — and it lifts when v2 inline mode lands.
+ *
+ * @example
+ * // The host cannot reach into your iframe's DOM — put the theme on YOUR root.
+ * const theme = useBlockTheme();
+ * return <div data-theme={theme}>…</div>;
+ */
+export function useBlockTheme() {
+    return useTransportSnapshot().theme;
+}
+//# sourceMappingURL=useBlockTheme.js.map

package/dist/hooks/useBlockTheme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useBlockTheme.js","sourceRoot":"","sources":["../../src/hooks/useBlockTheme.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,oBAAoB,EAAE,CAAC,KAAK,CAAC;AACtC,CAAC"}

package/dist/hooks/useBuzzWorkflow.d.ts

@@ -150,12 +150,24 @@ interface UseBuzzWorkflowReturn {
  * `estimate`/`submit` take a full {@link WorkflowBody} — the discriminated
  * union keyed by `kind`, with THREE members as of `@civitai/app-sdk@0.30.0`:
  * a `textToImage` body (`{ kind, modelId, modelVersionId, params }`), a
- * `customComfy` recipe body (`{ kind, recipe, params }`), or a `step` body
+ * `customComfy` body (`kind: 'customComfy'`), or a `step` body
  * (`{ kind: 'step', step, params }` — a server-registered orchestrator step
  * such as `'chat-completion'`), never a bare `{ prompt }`. The hook forwards
  * the body to the host verbatim and never reads variant-specific fields, so
  * every member flows through unchanged, including any member added later.
  *
+ * 🔴 `customComfy` IS ITSELF A UNION, on `mode` — an app CAN ship its own
+ * ComfyUI graph. `WorkflowBodyCustomComfyRecipe` (`mode` omitted or `'recipe'`)
+ * names a server-registered recipe; `WorkflowBodyCustomComfyInline`
+ * (`mode: 'inline'`) carries the graph itself, plus its declared AIR
+ * `resources` and a `maxBuzz` bound. The inline arm is LIVE in production
+ * (developer-only) and this comment used to describe `customComfy` as a
+ * recipe-only `{ kind, recipe, params }` shape — written when that was true and
+ * never revisited once the arm shipped. A developer working against the live
+ * feature read the equivalent claim on the type, believed it over their own
+ * instinct, and concluded the capability did not exist. `@civitai/app-sdk`
+ * 0.30.0 predates the inline arm; the union above is otherwise unchanged.
+ *
  * @returns `{ estimate, submit, poll, watch, cancel, status, result, error }`.
  *
  * @example

package/dist/hooks/useBuzzWorkflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBuzzWorkflow.d.ts","sourceRoot":"","sources":["../../src/hooks/useBuzzWorkflow.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AA8BnG;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAW7C,iEAAiE;AACjE,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACrD;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAyBD,oCAAoC;AACpC,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,qBAAqB;IAC7B,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACjE,MAAM,EAAE,CACN,IAAI,EAAE,YAAY,EAClB,OAAO,CAAC,EAAE,qBAAqB,KAC5B,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACpC;;;OAGG;IACH,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,EAAE,CACL,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,oBAAoB,KAC3B,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACpC;;;;;;OAMG;IACH,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC/D,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACrC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,eAAe,IAAI,qBAAqB,CA+MvD"}
+{"version":3,"file":"useBuzzWorkflow.d.ts","sourceRoot":"","sources":["../../src/hooks/useBuzzWorkflow.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AA8BnG;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAW7C,iEAAiE;AACjE,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACrD;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAyBD,oCAAoC;AACpC,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,qBAAqB;IAC7B,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACjE,MAAM,EAAE,CACN,IAAI,EAAE,YAAY,EAClB,OAAO,CAAC,EAAE,qBAAqB,KAC5B,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACpC;;;OAGG;IACH,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,EAAE,CACL,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,oBAAoB,KAC3B,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACpC;;;;;;OAMG;IACH,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC/D,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACrC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,wBAAgB,eAAe,IAAI,qBAAqB,CA+MvD"}

package/dist/hooks/useBuzzWorkflow.js

@@ -94,12 +94,24 @@ function sleep(ms, signal) {
  * `estimate`/`submit` take a full {@link WorkflowBody} — the discriminated
  * union keyed by `kind`, with THREE members as of `@civitai/app-sdk@0.30.0`:
  * a `textToImage` body (`{ kind, modelId, modelVersionId, params }`), a
- * `customComfy` recipe body (`{ kind, recipe, params }`), or a `step` body
+ * `customComfy` body (`kind: 'customComfy'`), or a `step` body
  * (`{ kind: 'step', step, params }` — a server-registered orchestrator step
  * such as `'chat-completion'`), never a bare `{ prompt }`. The hook forwards
  * the body to the host verbatim and never reads variant-specific fields, so
  * every member flows through unchanged, including any member added later.
  *
+ * 🔴 `customComfy` IS ITSELF A UNION, on `mode` — an app CAN ship its own
+ * ComfyUI graph. `WorkflowBodyCustomComfyRecipe` (`mode` omitted or `'recipe'`)
+ * names a server-registered recipe; `WorkflowBodyCustomComfyInline`
+ * (`mode: 'inline'`) carries the graph itself, plus its declared AIR
+ * `resources` and a `maxBuzz` bound. The inline arm is LIVE in production
+ * (developer-only) and this comment used to describe `customComfy` as a
+ * recipe-only `{ kind, recipe, params }` shape — written when that was true and
+ * never revisited once the arm shipped. A developer working against the live
+ * feature read the equivalent claim on the type, believed it over their own
+ * instinct, and concluded the capability did not exist. `@civitai/app-sdk`
+ * 0.30.0 predates the inline arm; the union above is otherwise unchanged.
+ *
  * @returns `{ estimate, submit, poll, watch, cancel, status, result, error }`.
  *
  * @example

package/dist/hooks/useBuzzWorkflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBuzzWorkflow.js","sourceRoot":"","sources":["../../src/hooks/useBuzzWorkflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAI9C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEpF;;;;GAIG;AACH,MAAM,iBAAiB,GAAiD,IAAI,GAAG,CAAC;IAC9E,WAAW;IACX,QAAQ;IACR,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAE5C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,qFAAqF;AACrF,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC,6EAA6E;AAC7E,MAAM,wBAAwB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE7C,gFAAgF;AAChF,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAwDpC;;;;;;;;;GASG;AACH,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAmED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAiB,MAAM,CAAC,CAAC;IAC7D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAA+B,IAAI,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,IAAkB,EAAE,EAAE;QACxD,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CACzC,YAAY,EAAE,EACd,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAChD,iBAAiB,EACjB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAC3C,CAAC;YACF,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS,CAAC,YAAY,CAAC,CAAC;YACxB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAY,CAAC,CAAC;YACvB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,IAAkB,EAAE,OAA+B,EAAE,EAAE;QACvF,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CACzC,YAAY,EAAE,EACd,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAC9D,oBAAoB,EACpB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAC3C,CAAC;YACF,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACvE,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAY,CAAC,CAAC;YACvB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;;;OAIG;IACH,MAAM,QAAQ,GAAG,WAAW,CAC1B,KAAK,EAAE,UAAkB,EAAE,WAAoB,EAAkC,EAAE;QACjF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CACzC,YAAY,EAAE,EACd;YACE,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE;gBACP,UAAU;gBACV,iEAAiE;gBACjE,gEAAgE;gBAChE,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE;SACF,EACD,iBAAiB,EACjB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAC3C,CAAC;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,yCAAyC;QACzC,2EAA2E;QAC3E,yEAAyE;QACzE,yBAAyB;QACzB,EAAE;QACF,0EAA0E;QAC1E,iEAAiE;QACjE,yEAAyE;QACzE,qEAAqE;QACrE,4DAA4D;QAC5D,2EAA2E;QAC3E,oEAAoE;QACpE,eAAe;QACf,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,uDAAuD,UAAU,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,EACD,EAAE,CACH,CAAC;IAEF,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,UAAkB,EAAE,EAAE;QAC3B,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC5C,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,SAAS,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAY,CAAC,CAAC;YACvB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,CAAC,CACX,CAAC;IAEF,MAAM,KAAK,GAAG,WAAW,CACvB,KAAK,EAAE,UAAkB,EAAE,OAA8B,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,OAAO,EAAE,UAAU,IAAI,yBAAyB,CAAC;QAClE,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,0BAA0B,CAAC;QACvE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,yBAAyB,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,wBAAwB,CAAC,CAAC;QAE/E,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,SAAS,CAAC,SAAS,CAAC,CAAC;QAErB,IAAI,IAAI,GAAiC,IAAI,CAAC;QAC9C,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAE5B,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,2CAA2C;QAC3C,SAAS,CAAC;YACR,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO;gBAAE,MAAM;YAEpC,IAAI,QAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACnD,mBAAmB,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,6DAA6D;gBAC7D,6CAA6C;gBAC7C,mBAAmB,IAAI,CAAC,CAAC;gBACzB,IAAI,mBAAmB,GAAG,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC/D,QAAQ,CAAC,GAAY,CAAC,CAAC;oBACvB,SAAS,CAAC,OAAO,CAAC,CAAC;oBACnB,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBACvC,SAAS;YACX,CAAC;YAED,IAAI,GAAG,QAAQ,CAAC;YAChB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,oEAAoE;YACpE,4CAA4C;YAC5C,EAAE;YACF,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;YAE9B,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,SAAS,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,sEAAsE;YACtE,wEAAwE;YACxE,uDAAuD;YACvD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,QAAQ;gBAAE,MAAM;YAC7C,MAAM,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,kEAAkE;QAClE,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACtB,oEAAoE;QACpE,0EAA0E;QAC1E,oEAAoE;QACpE,0CAA0C;QAC1C,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,SAAS,UAAU,+BAA+B,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC;QAC5B,MAAM,OAAO,CAAC;IAChB,CAAC,EACD,CAAC,QAAQ,CAAC,CACX,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,UAAkB,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CACzC,YAAY,EAAE,EACd,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,EACpD,mBAAmB,EACnB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAC3C,CAAC;YACF,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS,CAAC,MAAM,CAAC,CAAC;YAClB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,sEAAsE;YACtE,sDAAsD;YACtD,QAAQ,CAAC,GAAY,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"useBuzzWorkflow.js","sourceRoot":"","sources":["../../src/hooks/useBuzzWorkflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAI9C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEpF;;;;GAIG;AACH,MAAM,iBAAiB,GAAiD,IAAI,GAAG,CAAC;IAC9E,WAAW;IACX,QAAQ;IACR,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAE5C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,qFAAqF;AACrF,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC,6EAA6E;AAC7E,MAAM,wBAAwB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE7C,gFAAgF;AAChF,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAwDpC;;;;;;;;;GASG;AACH,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAmED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAiB,MAAM,CAAC,CAAC;IAC7D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAA+B,IAAI,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,IAAkB,EAAE,EAAE;QACxD,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CACzC,YAAY,EAAE,EACd,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAChD,iBAAiB,EACjB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAC3C,CAAC;YACF,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS,CAAC,YAAY,CAAC,CAAC;YACxB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAY,CAAC,CAAC;YACvB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,IAAkB,EAAE,OAA+B,EAAE,EAAE;QACvF,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CACzC,YAAY,EAAE,EACd,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAC9D,oBAAoB,EACpB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAC3C,CAAC;YACF,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACvE,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAY,CAAC,CAAC;YACvB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;;;OAIG;IACH,MAAM,QAAQ,GAAG,WAAW,CAC1B,KAAK,EAAE,UAAkB,EAAE,WAAoB,EAAkC,EAAE;QACjF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CACzC,YAAY,EAAE,EACd;YACE,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE;gBACP,UAAU;gBACV,iEAAiE;gBACjE,gEAAgE;gBAChE,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE;SACF,EACD,iBAAiB,EACjB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAC3C,CAAC;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,yCAAyC;QACzC,2EAA2E;QAC3E,yEAAyE;QACzE,yBAAyB;QACzB,EAAE;QACF,0EAA0E;QAC1E,iEAAiE;QACjE,yEAAyE;QACzE,qEAAqE;QACrE,4DAA4D;QAC5D,2EAA2E;QAC3E,oEAAoE;QACpE,eAAe;QACf,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,uDAAuD,UAAU,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,EACD,EAAE,CACH,CAAC;IAEF,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,UAAkB,EAAE,EAAE;QAC3B,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC5C,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,SAAS,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAY,CAAC,CAAC;YACvB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,CAAC,CACX,CAAC;IAEF,MAAM,KAAK,GAAG,WAAW,CACvB,KAAK,EAAE,UAAkB,EAAE,OAA8B,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,OAAO,EAAE,UAAU,IAAI,yBAAyB,CAAC;QAClE,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,0BAA0B,CAAC;QACvE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,yBAAyB,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,wBAAwB,CAAC,CAAC;QAE/E,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,SAAS,CAAC,SAAS,CAAC,CAAC;QAErB,IAAI,IAAI,GAAiC,IAAI,CAAC;QAC9C,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAE5B,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,2CAA2C;QAC3C,SAAS,CAAC;YACR,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO;gBAAE,MAAM;YAEpC,IAAI,QAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACnD,mBAAmB,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,6DAA6D;gBAC7D,6CAA6C;gBAC7C,mBAAmB,IAAI,CAAC,CAAC;gBACzB,IAAI,mBAAmB,GAAG,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC/D,QAAQ,CAAC,GAAY,CAAC,CAAC;oBACvB,SAAS,CAAC,OAAO,CAAC,CAAC;oBACnB,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBACvC,SAAS;YACX,CAAC;YAED,IAAI,GAAG,QAAQ,CAAC;YAChB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,oEAAoE;YACpE,4CAA4C;YAC5C,EAAE;YACF,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;YAE9B,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,SAAS,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,sEAAsE;YACtE,wEAAwE;YACxE,uDAAuD;YACvD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,QAAQ;gBAAE,MAAM;YAC7C,MAAM,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,kEAAkE;QAClE,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACtB,oEAAoE;QACpE,0EAA0E;QAC1E,oEAAoE;QACpE,0CAA0C;QAC1C,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,SAAS,UAAU,+BAA+B,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC;QAC5B,MAAM,OAAO,CAAC;IAChB,CAAC,EACD,CAAC,QAAQ,CAAC,CACX,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,UAAkB,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CACzC,YAAY,EAAE,EACd,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,EACpD,mBAAmB,EACnB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAC3C,CAAC;YACF,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS,CAAC,MAAM,CAAC,CAAC;YAClB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,sEAAsE;YACtE,sDAAsD;YACtD,QAAQ,CAAC,GAAY,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC1E,CAAC"}

package/dist/hooks/useConsentUnavailable.d.ts

@@ -0,0 +1,92 @@
+import type { ConsentUnavailablePayload } from '@civitai/app-sdk/blocks';
+export type { ConsentUnavailablePayload };
+/** What {@link useConsentUnavailable} returns. */
+export interface UseConsentUnavailable {
+    /**
+     * The most recent `CONSENT_UNAVAILABLE` push, or `null` if the host has not
+     * refused (the normal case — nothing to render differently).
+     *
+     * 🔴 `refusal.scopes` CAN BE EMPTY and that is still a refusal. The host
+     * decides to refuse on its own UNFILTERED un-grantable set, then filters the
+     * names it puts on the wire down to the public block-scope vocabulary — so a
+     * request naming nothing the platform recognises refuses with `scopes: []`.
+     * Branch on `refusal !== null`; use `refusal.scopes` only to word the copy.
+     */
+    refusal: ConsentUnavailablePayload | null;
+    /**
+     * Clear the stored refusal — this hook's state AND the buffered copy.
+     *
+     * A refusal is scoped to the scopes that were asked for, not to the block, so
+     * it must not latch forever: a block that is refused `ai:write:budgeted` may
+     * still legitimately request something else later, and a long-lived block
+     * whose host re-inits (sign-in, a new token) can find itself grantable again.
+     * Call this when you move on from the refused action.
+     *
+     * Clearing the BUFFER too is load-bearing, not tidiness: the refusal is
+     * retained across mounts (see the hook docblock), so a `reset()` that cleared
+     * only local state would be silently undone the next time this hook mounted —
+     * the documented "Try again" button would put the refusal straight back.
+     */
+    reset: () => void;
+}
+/**
+ * Subscribe to the host's `CONSENT_UNAVAILABLE` push — the signal that a
+ * `REQUEST_CONSENT` this block sent can **never** be granted in this
+ * environment, because the scope was clamped or withheld at mint. Distinct from
+ * "the viewer hasn't confirmed the dialog yet", which produces no message at
+ * all.
+ *
+ * This is the whole point of the message: without it a block keeps telling the
+ * user *"Confirm in the Civitai dialog. If you dismissed it, click Generate
+ * again"* while the host says the permission is unavailable — two contradictory
+ * messages on one screen, and the misleading one is the block's.
+ *
+ * 🔴 **PRECONDITION — pass `scopes` to `requestConsent()`, with a real scope
+ * name in it.** The refusal is computed from the request's `scopes` hint, and
+ * both dev hosts and the real host (`resolveUngrantableConsentNotice`) return
+ * "no notice" unless that hint is an array holding AT LEAST ONE NON-EMPTY
+ * STRING. Measured on this package's implementation: `undefined`, a non-array,
+ * `[]`, `['']` and `[1, 2]` ALL yield `notify: false`, and the real host applies
+ * the same `requested.length === 0` guard. So `requestConsent({ scopes: [] })`
+ * follows the letter of "always pass scopes" and still produces silence — no
+ * grant, no refusal, no error — and this hook sits at `null` forever. The reason
+ * is that without a named scope proven un-grantable there is no way to
+ * distinguish "never" from "not confirmed yet", and guessing is what produced
+ * the contradictory screen. Call `requestConsent({ scopes: ['ai:write:budgeted'] })`.
+ *
+ * 🔴 **UNCORRELATED, AND THAT IS THE SHAPE OF THE PUBLIC API — not an oversight
+ * that can be fixed later.** `REQUEST_CONSENT` carries no `requestId`, so
+ * `CONSENT_UNAVAILABLE` is a fire-and-forget push and not a reply. Two
+ * consequences a block author has to design around: EVERY mounted
+ * `useConsentUnavailable()` observes EVERY refusal, and there is no reliable way
+ * to filter one out — `scopes` cannot serve as a correlation key because it may
+ * legitimately be `[]` and is in any case only advisory. If two independent
+ * parts of your block request different scopes, both will see both refusals;
+ * keep the request and its refusal UI in one component, or track which request
+ * is outstanding yourself. Nothing here awaits anything — against a host that
+ * never sends the message the hook simply stays `null`, which is today's
+ * behaviour.
+ *
+ * 🔴 **A refusal is BUFFERED, so one that arrives while this hook is unmounted
+ * is not lost.** The transport delivers an unsolicited push only to handlers
+ * registered at the moment it arrives, so without a buffer a refusal that landed
+ * before mount (or between unmount and remount) vanished — and a dropped refusal
+ * puts back the two-message screen above. `requestConsent()` arms the buffer as
+ * it sends, and a mounting hook seeds from it. The buffer holds at most the
+ * LATEST refusal, is discarded when the block token changes (its premise is that
+ * token's scopes), and is cleared by `reset()`. See
+ * `internal/consentRefusalLatch.ts`.
+ *
+ * The subscription goes through the transport, so the handler runs only after
+ * the message has cleared the origin allowlist AND the payload validator; the
+ * hook never adds its own `window` listener behind that boundary.
+ *
+ * @example
+ * const { requestConsent } = useRequestConsent();
+ * const { refusal } = useConsentUnavailable();
+ *
+ * if (refusal) return <p>Generating isn't available on this page.</p>;
+ * return <button onClick={() => requestConsent({ scopes: ['ai:write:budgeted'] })}>Generate</button>;
+ */
+export declare function useConsentUnavailable(): UseConsentUnavailable;
+//# sourceMappingURL=useConsentUnavailable.d.ts.map

package/dist/hooks/useConsentUnavailable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useConsentUnavailable.d.ts","sourceRoot":"","sources":["../../src/hooks/useConsentUnavailable.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAUzE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAE1C,kDAAkD;AAClD,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;OASG;IACH,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC1C;;;;;;;;;;;;;OAaG;IACH,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,wBAAgB,qBAAqB,IAAI,qBAAqB,CA+B7D"}

package/dist/hooks/useConsentUnavailable.js

@@ -0,0 +1,93 @@
+import { useCallback, useEffect, useState } from 'react';
+import { armConsentRefusalLatch, clearConsentRefusalLatch, readConsentRefusalLatch, } from '../internal/consentRefusalLatch.js';
+import { getTransport } from '../internal/singleton.js';
+import { subscribeTyped } from '../internal/transport.js';
+/**
+ * Subscribe to the host's `CONSENT_UNAVAILABLE` push — the signal that a
+ * `REQUEST_CONSENT` this block sent can **never** be granted in this
+ * environment, because the scope was clamped or withheld at mint. Distinct from
+ * "the viewer hasn't confirmed the dialog yet", which produces no message at
+ * all.
+ *
+ * This is the whole point of the message: without it a block keeps telling the
+ * user *"Confirm in the Civitai dialog. If you dismissed it, click Generate
+ * again"* while the host says the permission is unavailable — two contradictory
+ * messages on one screen, and the misleading one is the block's.
+ *
+ * 🔴 **PRECONDITION — pass `scopes` to `requestConsent()`, with a real scope
+ * name in it.** The refusal is computed from the request's `scopes` hint, and
+ * both dev hosts and the real host (`resolveUngrantableConsentNotice`) return
+ * "no notice" unless that hint is an array holding AT LEAST ONE NON-EMPTY
+ * STRING. Measured on this package's implementation: `undefined`, a non-array,
+ * `[]`, `['']` and `[1, 2]` ALL yield `notify: false`, and the real host applies
+ * the same `requested.length === 0` guard. So `requestConsent({ scopes: [] })`
+ * follows the letter of "always pass scopes" and still produces silence — no
+ * grant, no refusal, no error — and this hook sits at `null` forever. The reason
+ * is that without a named scope proven un-grantable there is no way to
+ * distinguish "never" from "not confirmed yet", and guessing is what produced
+ * the contradictory screen. Call `requestConsent({ scopes: ['ai:write:budgeted'] })`.
+ *
+ * 🔴 **UNCORRELATED, AND THAT IS THE SHAPE OF THE PUBLIC API — not an oversight
+ * that can be fixed later.** `REQUEST_CONSENT` carries no `requestId`, so
+ * `CONSENT_UNAVAILABLE` is a fire-and-forget push and not a reply. Two
+ * consequences a block author has to design around: EVERY mounted
+ * `useConsentUnavailable()` observes EVERY refusal, and there is no reliable way
+ * to filter one out — `scopes` cannot serve as a correlation key because it may
+ * legitimately be `[]` and is in any case only advisory. If two independent
+ * parts of your block request different scopes, both will see both refusals;
+ * keep the request and its refusal UI in one component, or track which request
+ * is outstanding yourself. Nothing here awaits anything — against a host that
+ * never sends the message the hook simply stays `null`, which is today's
+ * behaviour.
+ *
+ * 🔴 **A refusal is BUFFERED, so one that arrives while this hook is unmounted
+ * is not lost.** The transport delivers an unsolicited push only to handlers
+ * registered at the moment it arrives, so without a buffer a refusal that landed
+ * before mount (or between unmount and remount) vanished — and a dropped refusal
+ * puts back the two-message screen above. `requestConsent()` arms the buffer as
+ * it sends, and a mounting hook seeds from it. The buffer holds at most the
+ * LATEST refusal, is discarded when the block token changes (its premise is that
+ * token's scopes), and is cleared by `reset()`. See
+ * `internal/consentRefusalLatch.ts`.
+ *
+ * The subscription goes through the transport, so the handler runs only after
+ * the message has cleared the origin allowlist AND the payload validator; the
+ * hook never adds its own `window` listener behind that boundary.
+ *
+ * @example
+ * const { requestConsent } = useRequestConsent();
+ * const { refusal } = useConsentUnavailable();
+ *
+ * if (refusal) return <p>Generating isn't available on this page.</p>;
+ * return <button onClick={() => requestConsent({ scopes: ['ai:write:budgeted'] })}>Generate</button>;
+ */
+export function useConsentUnavailable() {
+    const [refusal, setRefusal] = useState(null);
+    useEffect(() => {
+        const transport = getTransport();
+        // Keep recording even while nothing is mounted, and seed from anything
+        // recorded before this mount. Seeding in the effect (not lazy `useState`)
+        // is deliberate: the latch is armed here too, so the read has to happen
+        // after the arm, and an effect is the only place both can be ordered.
+        armConsentRefusalLatch(transport);
+        const buffered = readConsentRefusalLatch(transport);
+        if (buffered)
+            setRefusal(buffered);
+        // `subscribeTyped` (not the raw `onMessage`) is what makes `payload` a
+        // `ConsentUnavailablePayload` here instead of `unknown` + a cast at the call
+        // site — the cast is unchecked, so a payload shape change would compile
+        // straight through it in every consuming block.
+        return subscribeTyped(transport, 'CONSENT_UNAVAILABLE', (payload) => {
+            // Store the payload UNCONDITIONALLY. No `payload.scopes.length` gate: an
+            // empty `scopes` is a legitimate refusal (see `UseConsentUnavailable`),
+            // and gating on it would drop the message this hook exists to deliver.
+            setRefusal(payload);
+        });
+    }, []);
+    const reset = useCallback(() => {
+        clearConsentRefusalLatch();
+        setRefusal(null);
+    }, []);
+    return { refusal, reset };
+}
+//# sourceMappingURL=useConsentUnavailable.js.map

package/dist/hooks/useConsentUnavailable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useConsentUnavailable.js","sourceRoot":"","sources":["../../src/hooks/useConsentUnavailable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAIzD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAkC1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAmC,IAAI,CAAC,CAAC;IAE/E,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,QAAQ;YAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEnC,uEAAuE;QACvE,6EAA6E;QAC7E,wEAAwE;QACxE,gDAAgD;QAChD,OAAO,cAAc,CAAC,SAAS,EAAE,qBAAqB,EAAE,CAAC,OAAO,EAAE,EAAE;YAClE,yEAAyE;YACzE,wEAAwE;YACxE,uEAAuE;YACvE,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,wBAAwB,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC"}

package/dist/hooks/useRequestConsent.d.ts

@@ -7,9 +7,27 @@
  * the message like every inbound one (origin + `event.source` pinned, only
  * honored after BLOCK_READY) and opens its consent UI.
  *
- * `scopes` is an optional advisory hint of which scopes the action needs; the
- * host independently grants the missing set it computed at mint, so the block
- * can omit it.
+ * `scopes` is an advisory hint of which scopes the action needs. It is optional
+ * in the signature, and for the GRANT path it genuinely is: the host
+ * independently grants the missing set it computed at mint, so a bare
+ * `requestConsent()` still opens the consent dialog.
+ *
+ * 🔴 BUT OMITTING IT DISABLES THE REFUSAL PATH ENTIRELY — pass `scopes`, AND
+ * PUT A REAL SCOPE NAME IN IT. The host's `CONSENT_UNAVAILABLE` push (see
+ * `useConsentUnavailable`) is computed FROM this hint, and the bar is higher
+ * than "an array is present": `resolveUngrantableConsentNotice` returns "no
+ * notice" unless the hint is an array containing AT LEAST ONE NON-EMPTY STRING.
+ * `undefined`, a non-array, `[]`, `['']` and `[1, 2]` all produce silence —
+ * measured on this package's implementation, and the real host has the identical
+ * `requested.length === 0` guard, so `requestConsent({ scopes: [] })` obeys the
+ * instruction above and STILL gets nothing back. That is deliberate — without a
+ * named scope proven un-grantable there is no way to distinguish "can NEVER be
+ * granted here" from "the viewer hasn't confirmed the dialog yet", and guessing
+ * is what produced the contradictory two-message screen this path exists to
+ * remove. The consequence for a block author: call `requestConsent()` bare (or
+ * with an empty hint) on an un-grantable surface and you get SILENCE — no grant,
+ * no refusal, no error — which reads as a broken message rather than a thin
+ * argument.
  *
  * Fire-and-forget: the host doesn't reply. On grant the host re-mints the block
  * token and pushes a TOKEN_REFRESH carrying the now-granted scopes — observe