@civitai/blocks-react 0.52.0 → 0.53.0

package/dist/internal/iframeTransport.d.ts

@@ -101,6 +101,103 @@ export declare class IframeTransport implements BlockTransport {
     dispose(): void;
     private dispatch;
     private flushOutbound;
+    /**
+     * Which block→host request a reply we are about to drop leaves hanging, and
+     * whether we can tell at all.
+     *
+     * 🔴 "NO REQUEST IS PENDING" AND "I CANNOT TELL WHICH" ARE DIFFERENT ANSWERS, and
+     * an earlier revision collapsed them. It returned `'other'` whenever `requestId`
+     * was not a readable string and the `console.warn` then asserted *"unsolicited
+     * push — nothing was awaiting it"*, which is FALSE for two shapes that occur:
+     *  - a reply whose whole payload is not an object (`isObject` is the first thing
+     *    most validators check), while its request sits in `pending` and hangs to its
+     *    timeout;
+     *  - a PRE-v2 host, which echoes `requestId` only via
+     *    `...(requestId ? { requestId } : {})` — the asymmetry
+     *    `isValidTokenRefreshResponse` exists to tolerate (NOT `isValidTokenRefresh`,
+     *    which validates a host PUSH and has no `requestId` handling at all), so a
+     *    legacy host's malformed `TOKEN_REFRESH_RESPONSE`
+     *    arrives with no `requestId` at all while `REQUEST_TOKEN` is awaiting it.
+     * In both, something IS hanging and the operator was told the opposite. So a
+     * reply that leaves a request OF ITS OWN TYPE unattributed reports `unknown`
+     * rather than `pushed`, and the warn names how many are awaiting that reply type
+     * rather than claiming none was.
+     *
+     * 🔴 AND THE LOOKUP APPLIES THE SAME `responseType` PREDICATE AS REAL
+     * CORRELATION. Without it, a malformed reply carrying ANOTHER in-flight request's
+     * `requestId` — which a buggy host can produce by echoing the wrong id — reports
+     * against the wrong request type, i.e. mislabels a healthy request as the broken
+     * one. `handleMessage` already refuses to settle such a reply; this must refuse to
+     * name it for the same reason.
+     *
+     * The `requestId` is read from an UNVALIDATED payload (the validator just
+     * rejected it), so it is used ONLY as a `Map` key on our own pending table and
+     * never trusted as data.
+     *
+     * 🔴 THE CLAMP IS NOT REDUNDANT WITH THE TYPE SYSTEM. `requestType` is whatever
+     * the caller passed to `sendRequest` — typed, but a JavaScript consumer, or a
+     * block built against a newer protocol, can put any string there, and this value
+     * becomes a Prometheus label on the host. See `boundBlockToParentMessageType`.
+     */
+    private hangingRequestTypeFor;
+    /**
+     * Tell the host that this transport refused an inbound message, so the drop
+     * becomes a number instead of a `console.warn` nobody is reading.
+     *
+     * 🔴 WHY IT GOES OVER THE BRIDGE AND NOT STRAIGHT TO AN ENDPOINT. A block runs
+     * in a sandboxed iframe at an OPAQUE origin with no ambient credential and no
+     * civitai session, so it has no metrics path of its own: a direct POST would be
+     * cross-origin, uncredentialed, and would need a new PUBLIC unauthenticated
+     * endpoint to receive it — a fresh abuse surface for an observability add-on, and
+     * explicitly out of scope. The host already owns the receiving half: its
+     * dispatcher counts every inbound bridge message on
+     * `civitai_app_block_bridge_messages_total{app_block_id,type,host,outcome}` and
+     * flushes it through the same-origin, coalescing `/api/track/block-message`
+     * beacon. Reporting over the bridge reuses that end to end and adds no route: the
+     * host's handler for this message records `outcome="validator_rejected"` against
+     * the `type` we name here.
+     *
+     * 🔴 THE VALIDATOR'S NAME IS NOT ON THIS WIRE, AND THE `console.warn` DOES NOT
+     * CLOSE THE GAP EITHER — an earlier revision of this docblock claimed it did, and
+     * that was false. `payloadValidatorFor` is a function from type to validator, so
+     * the TOP-LEVEL validator is derivable from the type already on the wire; a
+     * `validator` field would carry only that derivable half, which reads as coverage
+     * while adding none, and a fifth Prometheus label is not free (the beacon route's
+     * own docblock asks for the label product to be read before one is added). The
+     * half that is NOT derivable is which NESTED helper rejected —
+     * `isValidGatedImage` inside `isValidImagesResult` on 2026-09-18 — and the warn
+     * cannot supply it: `validator.name` resolves to the top-level validator, and no
+     * helper in `validate.ts` reports its own name anywhere at runtime. So that
+     * diagnosis is UNAVAILABLE today, from any surface. Closing it means teaching the
+     * validators to return a reason; do not read the warn as a substitute.
+     *
+     * 🔴 NOTHING IS REPORTED BEFORE `BLOCK_INIT`, DELIBERATELY. `dispatch` has no
+     * `parentOrigin` until the first valid init, so a report raised while rejecting a
+     * malformed `BLOCK_INIT` could only be QUEUED — and the host re-sends init on a
+     * ~400ms interval until `BLOCK_READY`, so that queue is a producer with no
+     * consumer: ~25 entries inside one 10s ready window, flushed only if a later init
+     * succeeds and silently discarded if none does. The gap it would have covered is
+     * already covered by a different series — a block that never inits never sends
+     * `BLOCK_READY`, so the host's ready timeout records
+     * `civitai_app_block_renders_total{result="timeout"}`. This counter exists for the
+     * failures AFTER ready, which that one is structurally blind to.
+     *
+     * 🔴 NO EMIT BUDGET, AND THE ONE AN EARLIER REVISION CARRIED WAS JUSTIFIED BY A
+     * FALSEHOOD. It capped reports at 30 per 10s "so a flood cannot burn the host's
+     * 30 msg/sec inbound budget that legitimate `BLOCK_ERROR` reporting needs". The
+     * host consumes `BLOCK_MESSAGE_REJECTED` in its shared dispatcher ABOVE that
+     * limiter — the same placement, and for the same stated reason, as its
+     * `no_handler` branch — so a report consumes none of that budget and the cap
+     * bought nothing. What it did buy was a permanent UNDERCOUNT, which inverts the
+     * receiving side's own documented preference: `bridgeLabels.ts` chooses its clamp
+     * so that "a real flood is still VISIBLE rather than exactly counted … the series
+     * reads 'enormous' instead of 'wrong'". A cap here makes a flood read SMALL, the
+     * one shape of wrongness that side rejects. Magnitude is therefore unbounded on
+     * this path exactly as it already is for `no_handler` and `deduped`; the host's
+     * `BRIDGE_MESSAGE_COUNT_MAX` is the clamp that bounds a row, and the beacon
+     * coalesces identical label sets, so the network cost of a flood is ~one row.
+     */
+    private reportRejection;
     private postToParent;
     private handleMessage;
     private applyTokenRefresh;

package/dist/internal/iframeTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"iframeTransport.d.ts","sourceRoot":"","sources":["../../src/internal/iframeTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAEzB,KAAK,wBAAwB,EAC9B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAML,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AASxB,MAAM,WAAW,sBAAsB;IACrC;;;;;;;OAOG;IACH,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AASD;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,cAAc;IACpD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoB;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IAEnD,yEAAyE;IACzE,OAAO,CAAC,YAAY,CAAuB;IAE3C,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiD;IAC1E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAE7D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsD;IAEpF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,WAAW,CAAuC;IAC1D,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,aAAa,CAAgC;IACrD,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAgC;gBAEpD,IAAI,EAAE,sBAAsB;IA6DxC;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;IAgDxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,aAAa;IAqBrB,WAAW,IAAI,aAAa;IAI5B;;;;;;;;;;;;;;;;OAgBG;IACH,aAAa,IAAI,MAAM,GAAG,IAAI;IAI9B,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAO3C,WAAW,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAIxC,WAAW,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAIhD,WAAW,CACT,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,wBAAwB,EACtC,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAChC,OAAO,CAAC,OAAO,CAAC;IAsBnB,SAAS,CACP,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAClC,MAAM,IAAI;IAeb,uDAAuD;IACvD,OAAO,IAAI,IAAI;IAYf,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,aAAa;IA0HrB,OAAO,CAAC,iBAAiB;IASzB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,IAAI;CAGb"}
+{"version":3,"file":"iframeTransport.d.ts","sourceRoot":"","sources":["../../src/internal/iframeTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAEzB,KAAK,wBAAwB,EAC9B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAML,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AASxB,MAAM,WAAW,sBAAsB;IACrC;;;;;;;OAOG;IACH,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqBD;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,cAAc;IACpD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoB;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IAEnD,yEAAyE;IACzE,OAAO,CAAC,YAAY,CAAuB;IAE3C,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiD;IAC1E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAE7D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsD;IAEpF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,WAAW,CAAuC;IAC1D,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,aAAa,CAAgC;IACrD,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAgC;gBAEpD,IAAI,EAAE,sBAAsB;IA6DxC;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;IAgDxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,aAAa;IAqBrB,WAAW,IAAI,aAAa;IAI5B;;;;;;;;;;;;;;;;OAgBG;IACH,aAAa,IAAI,MAAM,GAAG,IAAI;IAI9B,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAO3C,WAAW,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAIxC,WAAW,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAIhD,WAAW,CACT,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,wBAAwB,EACtC,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAChC,OAAO,CAAC,OAAO,CAAC;IAuBnB,SAAS,CACP,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAClC,MAAM,IAAI;IAeb,uDAAuD;IACvD,OAAO,IAAI,IAAI;IAYf,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,aAAa;IAOrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,OAAO,CAAC,qBAAqB;IAmD7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwDG;IACH,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,aAAa;IA4IrB,OAAO,CAAC,iBAAiB;IASzB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,IAAI;CAGb"}

package/dist/internal/iframeTransport.js

@@ -1,4 +1,4 @@
-import { isMessage, parseBlockInitFragment, stripBlockInitFragment, } from '@civitai/app-sdk/blocks';
+import { boundBlockToParentMessageType, isMessage, OTHER_MESSAGE_TYPE_LABEL, parseBlockInitFragment, stripBlockInitFragment, } from '@civitai/app-sdk/blocks';
 import { EMPTY_SNAPSHOT, nextRequestId, RequestTimeoutError, snapshotFromInit, tokenFromWrapped, } from './transport.js';
 import { OriginMatcher } from './originMatcher.js';
 import { DEFAULT_REQUEST_TIMEOUT_MS } from './requestTimeouts.js';
@@ -223,6 +223,7 @@ export class IframeTransport {
                 reject,
                 timeoutId,
                 responseType,
+                requestType: request.type,
             });
             this.dispatch(request.type, { ...request.payload, requestId });
         });
@@ -268,6 +269,164 @@ export class IframeTransport {
             this.postToParent(msg);
         }
     }
+    /**
+     * Which block→host request a reply we are about to drop leaves hanging, and
+     * whether we can tell at all.
+     *
+     * 🔴 "NO REQUEST IS PENDING" AND "I CANNOT TELL WHICH" ARE DIFFERENT ANSWERS, and
+     * an earlier revision collapsed them. It returned `'other'` whenever `requestId`
+     * was not a readable string and the `console.warn` then asserted *"unsolicited
+     * push — nothing was awaiting it"*, which is FALSE for two shapes that occur:
+     *  - a reply whose whole payload is not an object (`isObject` is the first thing
+     *    most validators check), while its request sits in `pending` and hangs to its
+     *    timeout;
+     *  - a PRE-v2 host, which echoes `requestId` only via
+     *    `...(requestId ? { requestId } : {})` — the asymmetry
+     *    `isValidTokenRefreshResponse` exists to tolerate (NOT `isValidTokenRefresh`,
+     *    which validates a host PUSH and has no `requestId` handling at all), so a
+     *    legacy host's malformed `TOKEN_REFRESH_RESPONSE`
+     *    arrives with no `requestId` at all while `REQUEST_TOKEN` is awaiting it.
+     * In both, something IS hanging and the operator was told the opposite. So a
+     * reply that leaves a request OF ITS OWN TYPE unattributed reports `unknown`
+     * rather than `pushed`, and the warn names how many are awaiting that reply type
+     * rather than claiming none was.
+     *
+     * 🔴 AND THE LOOKUP APPLIES THE SAME `responseType` PREDICATE AS REAL
+     * CORRELATION. Without it, a malformed reply carrying ANOTHER in-flight request's
+     * `requestId` — which a buggy host can produce by echoing the wrong id — reports
+     * against the wrong request type, i.e. mislabels a healthy request as the broken
+     * one. `handleMessage` already refuses to settle such a reply; this must refuse to
+     * name it for the same reason.
+     *
+     * The `requestId` is read from an UNVALIDATED payload (the validator just
+     * rejected it), so it is used ONLY as a `Map` key on our own pending table and
+     * never trusted as data.
+     *
+     * 🔴 THE CLAMP IS NOT REDUNDANT WITH THE TYPE SYSTEM. `requestType` is whatever
+     * the caller passed to `sendRequest` — typed, but a JavaScript consumer, or a
+     * block built against a newer protocol, can put any string there, and this value
+     * becomes a Prometheus label on the host. See `boundBlockToParentMessageType`.
+     */
+    hangingRequestTypeFor(replyType, payload) {
+        // 🔴 THE DISCRIMINATOR IS "WHO IS AWAITING **THIS REPLY TYPE**", NOT
+        // `pending.size`. An earlier revision used the size of the whole table, and it
+        // was wrong in BOTH directions — the shape this file keeps producing:
+        //  - too WIDE: a genuine malformed PUSH (`THEME_CHANGE`, `CONSENT_UNAVAILABLE`,
+        //    `TOKEN_REFRESH`) arriving while anything at all was in flight printed "one
+        //    may now hang", when `validate.ts` says in as many words that dropping one
+        //    of those "costs at most a stale theme … never a hang — nothing awaits this
+        //    message". For a busy block that made the honest push case near-unreachable;
+        //  - too NARROW, on the same pass: the `responseType`-mismatch branch reached
+        //    the "this reply names none of them" wording having just FOUND the request
+        //    by id, so it asserted the one thing that was demonstrably false there.
+        // Filtering by `responseType` answers both: if nobody is awaiting this reply
+        // type, nothing here can hang whatever else is in flight.
+        //
+        // ⚠️ ONE EXCEPTION, AND IT IS THE HIGHEST-STAKES MOMENT THIS WARN HAS.
+        // `BLOCK_INIT` has a validator and is never any request's `responseType`, so a
+        // malformed one always lands on `pushed` and prints "nothing was awaiting it" —
+        // while `waitForInit()` IS awaiting it and rejects 10s later, after which the
+        // host shows a fallback.
+        //
+        // ⚠️ AND THE FILTER DID CHANGE THIS PATH, which an earlier revision of this note
+        // denied on the premise that "pre-init `pending` is empty". It is not: a block
+        // calling `useViewer()` from a bare mount effect has `GET_VIEWER` in `pending`
+        // before any init lands, because `sendRequest` inserts there BEFORE `dispatch`
+        // decides to queue. Under the old `pending.size` discriminator that printed
+        // "1 request(s) … may now hang"; now it prints the push wording — i.e. the change
+        // moved this path in the direction this very note calls the worst one. The
+        // CONCLUSION still holds (no metric moves: `reportRejection` returns early on
+        // `!parentOrigin`), and the rule above is not universal. Only the premise was
+        // wrong.
+        const awaiting = [...this.pending.values()].filter((p) => p.responseType === replyType);
+        if (awaiting.length === 0) {
+            return { label: OTHER_MESSAGE_TYPE_LABEL, hung: 'pushed' };
+        }
+        const requestId = payload?.requestId;
+        if (typeof requestId === 'string') {
+            const pending = this.pending.get(requestId);
+            // The same predicate `handleMessage` applies before it will SETTLE a reply.
+            // An id matching a request awaiting a DIFFERENT reply type names nothing we
+            // may attribute: blaming it would pin this breakage on a healthy request.
+            if (pending && pending.responseType === replyType) {
+                return { label: boundBlockToParentMessageType(pending.requestType), hung: 'named' };
+            }
+        }
+        return { label: OTHER_MESSAGE_TYPE_LABEL, hung: 'unknown', awaiting: awaiting.length };
+    }
+    /**
+     * Tell the host that this transport refused an inbound message, so the drop
+     * becomes a number instead of a `console.warn` nobody is reading.
+     *
+     * 🔴 WHY IT GOES OVER THE BRIDGE AND NOT STRAIGHT TO AN ENDPOINT. A block runs
+     * in a sandboxed iframe at an OPAQUE origin with no ambient credential and no
+     * civitai session, so it has no metrics path of its own: a direct POST would be
+     * cross-origin, uncredentialed, and would need a new PUBLIC unauthenticated
+     * endpoint to receive it — a fresh abuse surface for an observability add-on, and
+     * explicitly out of scope. The host already owns the receiving half: its
+     * dispatcher counts every inbound bridge message on
+     * `civitai_app_block_bridge_messages_total{app_block_id,type,host,outcome}` and
+     * flushes it through the same-origin, coalescing `/api/track/block-message`
+     * beacon. Reporting over the bridge reuses that end to end and adds no route: the
+     * host's handler for this message records `outcome="validator_rejected"` against
+     * the `type` we name here.
+     *
+     * 🔴 THE VALIDATOR'S NAME IS NOT ON THIS WIRE, AND THE `console.warn` DOES NOT
+     * CLOSE THE GAP EITHER — an earlier revision of this docblock claimed it did, and
+     * that was false. `payloadValidatorFor` is a function from type to validator, so
+     * the TOP-LEVEL validator is derivable from the type already on the wire; a
+     * `validator` field would carry only that derivable half, which reads as coverage
+     * while adding none, and a fifth Prometheus label is not free (the beacon route's
+     * own docblock asks for the label product to be read before one is added). The
+     * half that is NOT derivable is which NESTED helper rejected —
+     * `isValidGatedImage` inside `isValidImagesResult` on 2026-09-18 — and the warn
+     * cannot supply it: `validator.name` resolves to the top-level validator, and no
+     * helper in `validate.ts` reports its own name anywhere at runtime. So that
+     * diagnosis is UNAVAILABLE today, from any surface. Closing it means teaching the
+     * validators to return a reason; do not read the warn as a substitute.
+     *
+     * 🔴 NOTHING IS REPORTED BEFORE `BLOCK_INIT`, DELIBERATELY. `dispatch` has no
+     * `parentOrigin` until the first valid init, so a report raised while rejecting a
+     * malformed `BLOCK_INIT` could only be QUEUED — and the host re-sends init on a
+     * ~400ms interval until `BLOCK_READY`, so that queue is a producer with no
+     * consumer: ~25 entries inside one 10s ready window, flushed only if a later init
+     * succeeds and silently discarded if none does. The gap it would have covered is
+     * already covered by a different series — a block that never inits never sends
+     * `BLOCK_READY`, so the host's ready timeout records
+     * `civitai_app_block_renders_total{result="timeout"}`. This counter exists for the
+     * failures AFTER ready, which that one is structurally blind to.
+     *
+     * 🔴 NO EMIT BUDGET, AND THE ONE AN EARLIER REVISION CARRIED WAS JUSTIFIED BY A
+     * FALSEHOOD. It capped reports at 30 per 10s "so a flood cannot burn the host's
+     * 30 msg/sec inbound budget that legitimate `BLOCK_ERROR` reporting needs". The
+     * host consumes `BLOCK_MESSAGE_REJECTED` in its shared dispatcher ABOVE that
+     * limiter — the same placement, and for the same stated reason, as its
+     * `no_handler` branch — so a report consumes none of that budget and the cap
+     * bought nothing. What it did buy was a permanent UNDERCOUNT, which inverts the
+     * receiving side's own documented preference: `bridgeLabels.ts` chooses its clamp
+     * so that "a real flood is still VISIBLE rather than exactly counted … the series
+     * reads 'enormous' instead of 'wrong'". A cap here makes a flood read SMALL, the
+     * one shape of wrongness that side rejects. Magnitude is therefore unbounded on
+     * this path exactly as it already is for `no_handler` and `deduped`; the host's
+     * `BRIDGE_MESSAGE_COUNT_MAX` is the clamp that bounds a row, and the beacon
+     * coalesces identical label sets, so the network cost of a flood is ~one row.
+     */
+    reportRejection(hangingRequestType) {
+        // No parent origin yet ⇒ nothing to post to, and queueing is worse than
+        // dropping here (see the docblock). Checked rather than left to `dispatch`,
+        // whose queue is unbounded and has no consumer on this path.
+        if (!this.parentOrigin)
+            return;
+        // Fail-soft: a throw here would propagate out of the `message` listener and
+        // abort dispatch for this event — turning an observability feature into a
+        // second silent drop on top of the one it is reporting.
+        try {
+            this.dispatch('BLOCK_MESSAGE_REJECTED', { type: hangingRequestType });
+        }
+        catch {
+            // swallow — telemetry must never break the transport it observes
+        }
+    }
     postToParent(msg) {
         // `parentOrigin` is captured from a validated BLOCK_INIT; safe to use as targetOrigin.
         this.window.parent.postMessage(msg, this.parentOrigin);
@@ -284,8 +443,25 @@ export class IframeTransport {
         // rather than crash — see ./validate.ts.
         const validator = payloadValidatorFor(data.type);
         if (validator && !validator(data.payload)) {
+            const hanging = this.hangingRequestTypeFor(data.type, data.payload);
+            // 🔴 THE THREE CASES SAY THREE DIFFERENT THINGS, and `unknown` is the one an
+            // earlier revision printed as `pushed`. Claiming "nothing was awaiting it"
+            // while a request hangs is worse than saying nothing: it sends the one person
+            // reading this console away from the actual symptom.
+            const diagnosis = hanging.hung === 'named'
+                ? `; "${hanging.label}" will now hang to its request timeout)`
+                : hanging.hung === 'pushed'
+                    ? ', unsolicited push — nothing was awaiting it)'
+                    // `hung` is exactly three states and the two above are excluded, so this
+                    // arm is `'unknown'` by construction — but a FOURTH state would land here
+                    // silently, and the obvious `: 0` fallback prints "0 request(s) … so one
+                    // may now hang", a sentence that contradicts itself. Say that instead.
+                    : `; ${hanging.hung === 'unknown' ? `${hanging.awaiting} request(s)` : 'an unknown number of requests'} awaiting "${data.type}" and this reply names none of them, so one may now hang)`;
             // eslint-disable-next-line no-console -- developer-facing diagnostic at a trust boundary
-            console.warn(`IframeTransport: dropping malformed "${data.type}" message from ${event.origin}`);
+            console.warn(`IframeTransport: dropping malformed "${data.type}" message from ${event.origin} ` +
+                `(rejected by ${validator.name || 'an anonymous validator'}` +
+                diagnosis);
+            this.reportRejection(hanging.label);
             return;
         }
         // CONTRACT — load-bearing, do NOT weaken the `!this.initResolved` guard:

package/dist/internal/iframeTransport.js.map

@@ -1 +1 @@
-{"version":3,"file":"iframeTransport.js","sourceRoot":"","sources":["../../src/internal/iframeTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,sBAAsB,GAKvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,GAIjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAIpD,MAAM,eAAe,GAAG,MAAM,CAAC;AAuB/B;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACT,aAAa,CAAgB;IAC9C;;;;;OAKG;IACc,mBAAmB,CAAoB;IACvC,MAAM,CAAS;IAExB,QAAQ,GAAkB,cAAc,CAAC;IAChC,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IAEnD,yEAAyE;IACjE,YAAY,GAAkB,IAAI,CAAC;IAE3C,2EAA2E;IAC1D,QAAQ,GAA8C,EAAE,CAAC;IACzD,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE7D;;;;OAIG;IACc,aAAa,GAAG,IAAI,GAAG,EAA2C,CAAC;IAEnE,WAAW,CAA4B;IAChD,WAAW,CAAuC;IAClD,UAAU,CAAwB;IAClC,aAAa,CAAgC;IAC7C,YAAY,GAAG,KAAK,CAAC;IAEZ,eAAe,CAAgC;IAEhE,YAAY,IAA4B;QACtC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,yEAAyE;gBACvE,mFAAmF,CACtF,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,oBAAoB;aACjD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAK,UAAkC,CAAC,MAAO,CAAC;QACzE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;YAC3B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBACzB,IAAI,CAAC,UAAU,CACb,IAAI,KAAK,CACP,2DAA2D,eAAe,MAAM;oBAC9E,mGAAmG,CACtG,CACF,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,eAAe,CAAC,CAAC;QAEpB,2EAA2E;QAC3E,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,EAAE;QACF,+DAA+D;QAC/D,0EAA0E;QAC1E,0EAA0E;QAC1E,gBAAgB;QAChB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,eAAe,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAE9D,6EAA6E;QAC7E,6EAA6E;QAC7E,qEAAqE;QACrE,0EAA0E;QAC1E,4CAA4C;QAC5C,EAAE;QACF,4EAA4E;QAC5E,6EAA6E;QAC7E,8CAA8C;QAC9C,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACK,gBAAgB;QACtB,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,yCAAyC;YACzC,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC9C,IACE,QAAQ,CAAC,KAAK,KAAK,SAAS;YAC5B,QAAQ,CAAC,UAAU,KAAK,SAAS;YACjC,QAAQ,CAAC,eAAe,KAAK,SAAS,EACtC,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG;YACd,GAAG,IAAI,CAAC,QAAQ;YAChB,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,0EAA0E;QAC1E,oEAAoE;QACpE,4EAA4E;QAC5E,wDAAwD;QACxD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EACzB,EAAE,EACF,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CACrD,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,aAAa;QACnB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5B,uDAAuD;YACvD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;gBAAE,OAAO;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,aAAa,EAAiC,EAAE,MAAM,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,qEAAqE;YACvE,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,SAAS,CAAC,QAAoB;QAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,WAAW,CAAC,OAA6B;QACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,WAAW,CACT,OAAwB,EACxB,YAAsC,EACtC,OAA+B,EAAE;QAEjC,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,0BAA0B,CAAC;QAC/D,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnC,mEAAmE;oBACnE,6DAA6D;oBAC7D,MAAM,GAAG,GAAG,6BAA6B,OAAO,CAAC,IAAI,qBAAqB,SAAS,IAAI,CAAC;oBACxF,MAAM,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE;gBAC1B,OAAO;gBACP,MAAM;gBACN,SAAS;gBACT,YAAY;aACb,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CACP,IAA8B,EAC9B,OAAmC;QAEnC,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,OAAO;QACL,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACjE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAEO,QAAQ,CAAC,IAAY,EAAE,OAAgB;QAC7C,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IAEO,aAAa;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAG,CAAC;YACnC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,GAAuC;QAC1D,uFAAuF;QACvF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,YAAa,CAAC,CAAC;IAC1D,CAAC;IAEO,aAAa,CAAC,KAAmB;QACvC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAA6C,CAAC;QACjE,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAEtF,kEAAkE;QAClE,gEAAgE;QAChE,oEAAoE;QACpE,yCAAyC;QACzC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,yFAAyF;YACzF,OAAO,CAAC,IAAI,CACV,wCAAwC,IAAI,CAAC,IAAI,kBAAkB,KAAK,CAAC,MAAM,EAAE,CAClF,CAAC;YACF,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,wEAAwE;QACxE,8EAA8E;QAC9E,2EAA2E;QAC3E,kEAAkE;QAClE,8FAA8F;QAC9F,IAAI,SAAS,CAAqC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBACzB,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACjC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;gBACjC,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrB,kEAAkE;gBAClE,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,gEAAgE;gBAChE,4DAA4D;gBAC5D,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YACD,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,6CAA6C;QAC7C,IAAI,SAAS,CAAwC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,2EAA2E;QAC3E,6EAA6E;QAC7E,6CAA6C;QAC7C,EAAE;QACF,qEAAqE;QACrE,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,kCAAkC;QAClC,IAAI,SAAS,CAAuC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAA8C,CAAC;QACpE,IAAI,OAAmC,CAAC;QACxC,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,SAAS,IAAI,SAAS,CAAC,YAAY,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtD,OAAO,GAAG,SAAS,CAAC;gBACpB,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC;YACvC,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,oEAAoE;QACpE,gEAAgE;QAChE,kEAAkE;QAClE,oDAAoD;QACpD,IAAI,SAAS,CAAiD,IAAI,EAAE,wBAAwB,CAAC,EAAE,CAAC;YAC9F,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACzC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACtC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QAED,4EAA4E;QAC5E,6EAA6E;QAC7E,uEAAuE;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,8EAA8E;QAC9E,8EAA8E;QAC9E,gFAAgF;QAChF,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAClC,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,IAAI,SAAS,CAAkC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YAChE,oDAAoD;YACpD,OAAO;QACT,CAAC;QACD,IAAI,SAAS,CAAiC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC9D,OAAO;QACT,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,OAAqB;QAC7C,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,6CAA6C;QAC7C,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACK,gBAAgB,CAAC,KAA6B;QACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO;QAC1C,MAAM,IAAI,GAAkB,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxD,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACvE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,IAAI;QACV,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAC;IACpD,CAAC;CACF"}
+{"version":3,"file":"iframeTransport.js","sourceRoot":"","sources":["../../src/internal/iframeTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,SAAS,EACT,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,GAKvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,GAIjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAIpD,MAAM,eAAe,GAAG,MAAM,CAAC;AAmC/B;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACT,aAAa,CAAgB;IAC9C;;;;;OAKG;IACc,mBAAmB,CAAoB;IACvC,MAAM,CAAS;IAExB,QAAQ,GAAkB,cAAc,CAAC;IAChC,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IAEnD,yEAAyE;IACjE,YAAY,GAAkB,IAAI,CAAC;IAE3C,2EAA2E;IAC1D,QAAQ,GAA8C,EAAE,CAAC;IACzD,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE7D;;;;OAIG;IACc,aAAa,GAAG,IAAI,GAAG,EAA2C,CAAC;IAEnE,WAAW,CAA4B;IAChD,WAAW,CAAuC;IAClD,UAAU,CAAwB;IAClC,aAAa,CAAgC;IAC7C,YAAY,GAAG,KAAK,CAAC;IAEZ,eAAe,CAAgC;IAEhE,YAAY,IAA4B;QACtC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,yEAAyE;gBACvE,mFAAmF,CACtF,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,oBAAoB;aACjD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAK,UAAkC,CAAC,MAAO,CAAC;QACzE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;YAC3B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBACzB,IAAI,CAAC,UAAU,CACb,IAAI,KAAK,CACP,2DAA2D,eAAe,MAAM;oBAC9E,mGAAmG,CACtG,CACF,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,eAAe,CAAC,CAAC;QAEpB,2EAA2E;QAC3E,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,EAAE;QACF,+DAA+D;QAC/D,0EAA0E;QAC1E,0EAA0E;QAC1E,gBAAgB;QAChB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,eAAe,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAE9D,6EAA6E;QAC7E,6EAA6E;QAC7E,qEAAqE;QACrE,0EAA0E;QAC1E,4CAA4C;QAC5C,EAAE;QACF,4EAA4E;QAC5E,6EAA6E;QAC7E,8CAA8C;QAC9C,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACK,gBAAgB;QACtB,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,yCAAyC;YACzC,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC9C,IACE,QAAQ,CAAC,KAAK,KAAK,SAAS;YAC5B,QAAQ,CAAC,UAAU,KAAK,SAAS;YACjC,QAAQ,CAAC,eAAe,KAAK,SAAS,EACtC,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG;YACd,GAAG,IAAI,CAAC,QAAQ;YAChB,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,0EAA0E;QAC1E,oEAAoE;QACpE,4EAA4E;QAC5E,wDAAwD;QACxD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EACzB,EAAE,EACF,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CACrD,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,aAAa;QACnB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5B,uDAAuD;YACvD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;gBAAE,OAAO;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,aAAa,EAAiC,EAAE,MAAM,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,qEAAqE;YACvE,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,SAAS,CAAC,QAAoB;QAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,WAAW,CAAC,OAA6B;QACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,WAAW,CACT,OAAwB,EACxB,YAAsC,EACtC,OAA+B,EAAE;QAEjC,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,0BAA0B,CAAC;QAC/D,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnC,mEAAmE;oBACnE,6DAA6D;oBAC7D,MAAM,GAAG,GAAG,6BAA6B,OAAO,CAAC,IAAI,qBAAqB,SAAS,IAAI,CAAC;oBACxF,MAAM,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE;gBAC1B,OAAO;gBACP,MAAM;gBACN,SAAS;gBACT,YAAY;gBACZ,WAAW,EAAE,OAAO,CAAC,IAAI;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CACP,IAA8B,EAC9B,OAAmC;QAEnC,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,OAAO;QACL,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACjE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAEO,QAAQ,CAAC,IAAY,EAAE,OAAgB;QAC7C,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IAEO,aAAa;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAG,CAAC;YACnC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACK,qBAAqB,CAC3B,SAAiB,EACjB,OAAgB;QAEhB,qEAAqE;QACrE,+EAA+E;QAC/E,sEAAsE;QACtE,gFAAgF;QAChF,gFAAgF;QAChF,+EAA+E;QAC/E,gFAAgF;QAChF,iFAAiF;QACjF,8EAA8E;QAC9E,+EAA+E;QAC/E,4EAA4E;QAC5E,6EAA6E;QAC7E,0DAA0D;QAC1D,EAAE;QACF,uEAAuE;QACvE,+EAA+E;QAC/E,gFAAgF;QAChF,8EAA8E;QAC9E,yBAAyB;QACzB,EAAE;QACF,iFAAiF;QACjF,+EAA+E;QAC/E,+EAA+E;QAC/E,+EAA+E;QAC/E,4EAA4E;QAC5E,kFAAkF;QAClF,2EAA2E;QAC3E,8EAA8E;QAC9E,8EAA8E;QAC9E,SAAS;QACT,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;QACxF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,SAAS,GAAI,OAAsD,EAAE,SAAS,CAAC;QACrF,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5C,4EAA4E;YAC5E,4EAA4E;YAC5E,0EAA0E;YAC1E,IAAI,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAClD,OAAO,EAAE,KAAK,EAAE,6BAA6B,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwDG;IACK,eAAe,CAAC,kBAA0B;QAChD,wEAAwE;QACxE,4EAA4E;QAC5E,6DAA6D;QAC7D,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC/B,4EAA4E;QAC5E,0EAA0E;QAC1E,wDAAwD;QACxD,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,GAAuC;QAC1D,uFAAuF;QACvF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,YAAa,CAAC,CAAC;IAC1D,CAAC;IAEO,aAAa,CAAC,KAAmB;QACvC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAA6C,CAAC;QACjE,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAEtF,kEAAkE;QAClE,gEAAgE;QAChE,oEAAoE;QACpE,yCAAyC;QACzC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACpE,6EAA6E;YAC7E,2EAA2E;YAC3E,8EAA8E;YAC9E,qDAAqD;YACrD,MAAM,SAAS,GACb,OAAO,CAAC,IAAI,KAAK,OAAO;gBACtB,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,yCAAyC;gBAC9D,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACzB,CAAC,CAAC,+CAA+C;oBACjD,yEAAyE;oBACzE,0EAA0E;oBAC1E,yEAAyE;oBACzE,uEAAuE;oBACvE,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,aAAa,CAAC,CAAC,CAAC,+BAA+B,cAAc,IAAI,CAAC,IAAI,2DAA2D,CAAC;YAC/L,yFAAyF;YACzF,OAAO,CAAC,IAAI,CACV,wCAAwC,IAAI,CAAC,IAAI,kBAAkB,KAAK,CAAC,MAAM,GAAG;gBAChF,gBAAgB,SAAS,CAAC,IAAI,IAAI,wBAAwB,EAAE;gBAC5D,SAAS,CACZ,CAAC;YACF,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,wEAAwE;QACxE,8EAA8E;QAC9E,2EAA2E;QAC3E,kEAAkE;QAClE,8FAA8F;QAC9F,IAAI,SAAS,CAAqC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBACzB,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACjC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;gBACjC,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrB,kEAAkE;gBAClE,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,gEAAgE;gBAChE,4DAA4D;gBAC5D,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YACD,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,6CAA6C;QAC7C,IAAI,SAAS,CAAwC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,2EAA2E;QAC3E,6EAA6E;QAC7E,6CAA6C;QAC7C,EAAE;QACF,qEAAqE;QACrE,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,kCAAkC;QAClC,IAAI,SAAS,CAAuC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAA8C,CAAC;QACpE,IAAI,OAAmC,CAAC;QACxC,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,SAAS,IAAI,SAAS,CAAC,YAAY,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtD,OAAO,GAAG,SAAS,CAAC;gBACpB,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC;YACvC,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,oEAAoE;QACpE,gEAAgE;QAChE,kEAAkE;QAClE,oDAAoD;QACpD,IAAI,SAAS,CAAiD,IAAI,EAAE,wBAAwB,CAAC,EAAE,CAAC;YAC9F,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACzC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACtC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QAED,4EAA4E;QAC5E,6EAA6E;QAC7E,uEAAuE;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,8EAA8E;QAC9E,8EAA8E;QAC9E,gFAAgF;QAChF,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAClC,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,IAAI,SAAS,CAAkC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YAChE,oDAAoD;YACpD,OAAO;QACT,CAAC;QACD,IAAI,SAAS,CAAiC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC9D,OAAO;QACT,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,OAAqB;QAC7C,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,6CAA6C;QAC7C,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACK,gBAAgB,CAAC,KAA6B;QACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO;QAC1C,MAAM,IAAI,GAAkB,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxD,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACvE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,IAAI;QACV,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAC;IACpD,CAAC;CACF"}

package/dist/internal/requestTimeouts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"requestTimeouts.d.ts","sourceRoot":"","sources":["../../src/internal/requestTimeouts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAIxE;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,4BAA4B,QAAc,CAAC;AAExD,4DAA4D;AAC5D,MAAM,MAAM,mBAAmB;AAC7B,gFAAgF;AAC9E,OAAO;AACT,uFAAuF;GACrF,UAAU;AACZ,qFAAqF;GACnF,UAAU,CAAC;AA4Jf;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,wBAAwB,EAIhE,CAAC"}
+{"version":3,"file":"requestTimeouts.d.ts","sourceRoot":"","sources":["../../src/internal/requestTimeouts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAIxE;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,4BAA4B,QAAc,CAAC;AAExD,4DAA4D;AAC5D,MAAM,MAAM,mBAAmB;AAC7B,gFAAgF;AAC9E,OAAO;AACT,uFAAuF;GACrF,UAAU;AACZ,qFAAqF;GACnF,UAAU,CAAC;AAqKf;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,wBAAwB,EAIhE,CAAC"}

package/dist/internal/requestTimeouts.js

@@ -72,6 +72,15 @@ const REQUEST_TIMEOUT_CLASS = {
     // ── Fire-and-forget: no requestId, so no pending promise to time out ────
     BLOCK_ERROR: 'no-reply',
     BLOCK_HELLO: 'no-reply',
+    // Reports a drop that has ALREADY happened, so there is nothing to answer and
+    // nothing to bound. Deliberately `'no-reply'` and not merely "unhandled": if a
+    // host ever did reply to it, that reply would itself run the validator this
+    // message exists to report on — a rejection loop with NOTHING braking it. (The
+    // emitter carries no cap; an earlier revision did, and this comment used to name
+    // it as the brake.) The loop is unreachable today because the payload carries no
+    // `requestId`, so neither host NACKs it — but that is a property of the hosts,
+    // not of this bucket, which is why the bucket is the one that must stay.
+    BLOCK_MESSAGE_REJECTED: 'no-reply',
     BLOCK_READY: 'no-reply',
     NAVIGATE: 'no-reply',
     // Human-gated in SPIRIT, but the host never replies — a grant arrives later as

package/dist/internal/requestTimeouts.js.map

@@ -1 +1 @@
-{"version":3,"file":"requestTimeouts.js","sourceRoot":"","sources":["../../src/internal/requestTimeouts.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,MAAM,CAAC;AAWxD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,qBAAqB,GAAG;IAC5B,2EAA2E;IAC3E,kBAAkB,EAAE,OAAO,EAAE,wCAAwC;IACrE,sBAAsB,EAAE,OAAO,EAAE,8BAA8B;IAC/D,iBAAiB,EAAE,OAAO,EAAE,kCAAkC;IAC9D,oBAAoB,EAAE,OAAO,EAAE,gCAAgC;IAC/D,0BAA0B,EAAE,OAAO,EAAE,4CAA4C;IACjF,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,qBAAqB,EAAE,OAAO;IAC9B,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,sEAAsE;IACtE,8EAA8E;IAC9E,qEAAqE;IACrE,oBAAoB,EAAE,OAAO;IAE7B,2EAA2E;IAC3E,WAAW,EAAE,UAAU;IACvB,WAAW,EAAE,UAAU;IACvB,WAAW,EAAE,UAAU;IACvB,QAAQ,EAAE,UAAU;IACpB,+EAA+E;IAC/E,wEAAwE;IACxE,eAAe,EAAE,UAAU;IAC3B,eAAe,EAAE,UAAU;IAC3B,aAAa,EAAE,UAAU;IACzB,WAAW,EAAE,UAAU;IAEvB,2EAA2E;IAC3E,kBAAkB,EAAE,UAAU;IAC9B,eAAe,EAAE,UAAU;IAC3B,gBAAgB,EAAE,UAAU;IAC5B,iBAAiB,EAAE,UAAU;IAC7B,eAAe,EAAE,UAAU;IAC3B,mBAAmB,EAAE,UAAU;IAC/B,eAAe,EAAE,UAAU;IAC3B,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,iBAAiB,EAAE,UAAU;IAC7B,aAAa,EAAE,UAAU;IACzB,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,UAAU;IAC7B,gBAAgB,EAAE,UAAU;IAC5B,qBAAqB,EAAE,UAAU;IACjC,sBAAsB,EAAE,UAAU;IAClC,iBAAiB,EAAE,UAAU;IAC7B,UAAU,EAAE,UAAU;IACtB,iBAAiB,EAAE,UAAU;IAC7B,mBAAmB,EAAE,UAAU;IAC/B,aAAa,EAAE,UAAU;IACzB,gFAAgF;IAChF,8EAA8E;IAC9E,+EAA+E;IAC/E,2EAA2E;IAC3E,sDAAsD;IACtD,UAAU,EAAE,UAAU;IACtB,mBAAmB,EAAE,UAAU;IAC/B,aAAa,EAAE,UAAU;IACzB,UAAU,EAAE,UAAU;IACtB,gBAAgB,EAAE,UAAU;IAC5B,iBAAiB,EAAE,UAAU;IAC7B,WAAW,EAAE,UAAU;IACvB,aAAa,EAAE,UAAU;IACzB,aAAa,EAAE,UAAU;IACzB,aAAa,EAAE,UAAU;IACzB,WAAW,EAAE,UAAU;IACvB,eAAe,EAAE,UAAU;CACoC,CAAC;AAelE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,sBAAsB,GAC1B,SAA6C,CAAC;AAChD,KAAK,sBAAsB,CAAC;AAE5B,MAAM,sBAAsB,GAAU,SAGrC,CAAC;AACF,KAAK,sBAAsB,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,sBAAsB,GAAU,SAAsD,CAAC;AAC7F,KAAK,sBAAsB,CAAC;AAE5B,MAAM,wBAAwB,GAAU,SAAmD,CAAC;AAC5F,KAAK,wBAAwB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAClC;KACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;KACnD,IAAI,EAAE,CAAC"}
+{"version":3,"file":"requestTimeouts.js","sourceRoot":"","sources":["../../src/internal/requestTimeouts.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,MAAM,CAAC;AAWxD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,qBAAqB,GAAG;IAC5B,2EAA2E;IAC3E,kBAAkB,EAAE,OAAO,EAAE,wCAAwC;IACrE,sBAAsB,EAAE,OAAO,EAAE,8BAA8B;IAC/D,iBAAiB,EAAE,OAAO,EAAE,kCAAkC;IAC9D,oBAAoB,EAAE,OAAO,EAAE,gCAAgC;IAC/D,0BAA0B,EAAE,OAAO,EAAE,4CAA4C;IACjF,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,qBAAqB,EAAE,OAAO;IAC9B,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,sEAAsE;IACtE,8EAA8E;IAC9E,qEAAqE;IACrE,oBAAoB,EAAE,OAAO;IAE7B,2EAA2E;IAC3E,WAAW,EAAE,UAAU;IACvB,WAAW,EAAE,UAAU;IACvB,8EAA8E;IAC9E,+EAA+E;IAC/E,4EAA4E;IAC5E,+EAA+E;IAC/E,iFAAiF;IACjF,iFAAiF;IACjF,+EAA+E;IAC/E,yEAAyE;IACzE,sBAAsB,EAAE,UAAU;IAClC,WAAW,EAAE,UAAU;IACvB,QAAQ,EAAE,UAAU;IACpB,+EAA+E;IAC/E,wEAAwE;IACxE,eAAe,EAAE,UAAU;IAC3B,eAAe,EAAE,UAAU;IAC3B,aAAa,EAAE,UAAU;IACzB,WAAW,EAAE,UAAU;IAEvB,2EAA2E;IAC3E,kBAAkB,EAAE,UAAU;IAC9B,eAAe,EAAE,UAAU;IAC3B,gBAAgB,EAAE,UAAU;IAC5B,iBAAiB,EAAE,UAAU;IAC7B,eAAe,EAAE,UAAU;IAC3B,mBAAmB,EAAE,UAAU;IAC/B,eAAe,EAAE,UAAU;IAC3B,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,iBAAiB,EAAE,UAAU;IAC7B,aAAa,EAAE,UAAU;IACzB,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,UAAU;IAC7B,gBAAgB,EAAE,UAAU;IAC5B,qBAAqB,EAAE,UAAU;IACjC,sBAAsB,EAAE,UAAU;IAClC,iBAAiB,EAAE,UAAU;IAC7B,UAAU,EAAE,UAAU;IACtB,iBAAiB,EAAE,UAAU;IAC7B,mBAAmB,EAAE,UAAU;IAC/B,aAAa,EAAE,UAAU;IACzB,gFAAgF;IAChF,8EAA8E;IAC9E,+EAA+E;IAC/E,2EAA2E;IAC3E,sDAAsD;IACtD,UAAU,EAAE,UAAU;IACtB,mBAAmB,EAAE,UAAU;IAC/B,aAAa,EAAE,UAAU;IACzB,UAAU,EAAE,UAAU;IACtB,gBAAgB,EAAE,UAAU;IAC5B,iBAAiB,EAAE,UAAU;IAC7B,WAAW,EAAE,UAAU;IACvB,aAAa,EAAE,UAAU;IACzB,aAAa,EAAE,UAAU;IACzB,aAAa,EAAE,UAAU;IACzB,WAAW,EAAE,UAAU;IACvB,eAAe,EAAE,UAAU;CACoC,CAAC;AAelE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,sBAAsB,GAC1B,SAA6C,CAAC;AAChD,KAAK,sBAAsB,CAAC;AAE5B,MAAM,sBAAsB,GAAU,SAGrC,CAAC;AACF,KAAK,sBAAsB,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,sBAAsB,GAAU,SAAsD,CAAC;AAC7F,KAAK,sBAAsB,CAAC;AAE5B,MAAM,wBAAwB,GAAU,SAAmD,CAAC;AAC5F,KAAK,wBAAwB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAClC;KACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;KACnD,IAAI,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civitai/blocks-react",
-  "version": "0.52.0",
+  "version": "0.53.0",
   "description": "React hooks and iframe transport for Civitai Apps. Pairs with @civitai/app-sdk/blocks.",
   "license": "MIT",
   "type": "module",
@@ -35,8 +35,41 @@
     "@civitai/theme": "0.3.1"
   },
   "comment-peerDependencies": [
-    "The @civitai/app-sdk floor is DERIVED, not chosen: 0.40.0 is the lowest",
-    "published version that exports every symbol this package imports from the peer.",
+    "The @civitai/app-sdk floor is DERIVED, not chosen: it is the lowest published",
+    "version that exports every symbol this package imports from the peer.",
+    "",
+    "🔴 RAISED 0.40.0 -> 0.45.0 when this package began importing two NEW peer VALUE",
+    "symbols -- `boundBlockToParentMessageType` and `OTHER_MESSAGE_TYPE_LABEL`, used by",
+    "`internal/iframeTransport.ts` to bound the `BLOCK_MESSAGE_REJECTED` label. Both",
+    "ship for the first time in the app-sdk minor released alongside this change, so",
+    "0.45.0 is not a margin: it is the first version that has them. Measured against",
+    "the then-latest published 0.44.0 -- which SATISFIED the old range -- both are",
+    "absent from every subpath, and the failure is not a type error: `dist/index.js`",
+    "re-exports `IframeTransport`, so the package's MAIN ENTRY is in the failing module",
+    "graph and the block does not boot at all. Caught by an adversarial audit that",
+    "built the dist and resolved it, not by any gate; the paragraph below says why no",
+    "gate can. Step 4's positive control was run (a symbol that cannot exist reported",
+    "as absent), so the zero for the other symbols is a measurement and not a silent",
+    "pass.",
+    "",
+    "⚠️ 0.45.0 IS A PREDICTION ABOUT RELEASE ORDERING, NOT A MEASURED VERSION. It is",
+    "what the pending minor changeset publishes ONCE THIS BRANCH IS ON TOP OF a main",
+    "where app-sdk is already 0.44.0 and the catalog changeset has been consumed. If",
+    "another minor releases FIRST, the two symbols ship in 0.46.0 while 0.45.0",
+    "publishes WITHOUT them and SATISFIES this range -- #309's shape exactly, the one",
+    "this floor exists to close.",
+    "",
+    "🔴 AND `changeset version` WILL REWRITE THIS RANGE DOWNWARD IF IT RUNS TOO EARLY.",
+    "An earlier revision of this note said onlyUpdatePeerDependentsWhenOutOfRange",
+    "'guarantees changeset version will not correct it'. That is BACKWARDS, and it is",
+    "measured: run on this branch as it stands (app-sdk 0.43.0 in-tree, the catalog",
+    "changeset still present, so app-sdk computes to 0.44.0), `changeset version`",
+    "rewrites `>=0.45.0 <1.0.0` to `>=0.44.0` -- it LOWERS the floor to the exact",
+    "version that lacks the symbols AND drops the upper bound. The flag rewrites a",
+    "peer range precisely when the computed version falls OUT of it. Post-merge it",
+    "computes 0.45.0 and leaves the range alone, which is why this is not a live",
+    "defect -- but never run `changeset version` on this branch before rebasing, and",
+    "re-read the range afterwards rather than trusting the flag to protect it.",
     "",
     "🔴 A PEER RANGE IS METADATA AND NOTHING CHECKS IT AGAINST THE CODE. 0.49.0-0.51.0",
     "declared >=0.29.0 while importing `effectiveBrowsingCeiling` (app-sdk 0.39.0) and",
@@ -56,7 +89,7 @@
     "TO RE-DERIVE IT (do this when this package starts importing a new peer symbol):",
     "  1. collect the symbols -- every named `import`/`export … from '@civitai/app-sdk*'`",
     "     clause in src/, plus bare and star forms, which name a SUBPATH and no symbols",
-    "     but still have to resolve. At the time of writing: 60 symbols, 2 subpaths",
+    "     but still have to resolve. At the time of writing: 62 symbols, 2 subpaths",
     "     ('/blocks' and '/safe-storage').",
     "  2. in a scratch dir OUTSIDE this workspace (pnpm would resolve the peer to the",
     "     workspace copy and measure nothing), `npm i @civitai/app-sdk@<version>` and",
@@ -74,7 +107,7 @@
     "the tool was the expensive half."
   ],
   "peerDependencies": {
-    "@civitai/app-sdk": ">=0.40.0 <1.0.0",
+    "@civitai/app-sdk": ">=0.45.0 <1.0.0",
     "react": "^18.0.0 || ^19.0.0"
   },
   "devDependencies": {
@@ -89,7 +122,7 @@
     "react-dom": "^19.0.0",
     "typescript": "^5.9.2",
     "vitest": "^4.1.11",
-    "@civitai/app-sdk": "^0.43.0"
+    "@civitai/app-sdk": "^0.45.0"
   },
   "publishConfig": {
     "access": "public"