@civitai/blocks-react 0.53.0 → 0.54.0

package/README.md

@@ -27,7 +27,7 @@ your block app and the SDK share a single React tree.
 import { useRef } from 'react';
 import { useBlockContext, useBlockResize, useBuzzWorkflow } from '@civitai/blocks-react';
 import { Button } from '@civitai/blocks-react/ui';
-import { isModelSlotContext } from '@civitai/app-sdk/blocks';
+import { isModelSlotContext, isSignedIn } from '@civitai/app-sdk/blocks';
 
 export function App() {
   const { ready, context, viewer, theme } = useBlockContext();
@@ -35,7 +35,9 @@ export function App() {
   const rootRef = useRef<HTMLDivElement>(null);
   useBlockResize(rootRef);                 // host fits the iframe to content
 
-  if (!ready) return <div ref={rootRef}>Loading…</div>;
+  // No ref on the pre-init skeleton — useBlockResize observes the real root
+  // whenever it mounts, including on a later render.
+  if (!ready) return <div>Loading…</div>;
   // `context` is a union keyed on slotId — narrow with the guard, not a cast.
   if (!isModelSlotContext(context)) return <div ref={rootRef}>Wrong slot.</div>;
 
@@ -43,7 +45,8 @@ export function App() {
     // GOTCHA #60: set data-theme on YOUR OWN root — the host can't reach into
     // the iframe to set it. Without this any [data-theme="dark"] CSS is dormant.
     <div ref={rootRef} data-theme={theme}>
-      <p>Block for model {context.modelName} ({viewer ? 'signed in' : 'anon'})</p>
+      {/* Sign-in gate: call `isSignedIn`, never an identity read. */}
+      <p>Block for model {context.modelName} ({isSignedIn(viewer) ? 'signed in' : 'anon'})</p>
       {/* `/ui` Button — themed by the data-theme above; `loading` disables + shows a spinner */}
       <Button
         loading={status === 'submitting' || status === 'polling'}
@@ -111,7 +114,14 @@ const { ready, context, viewer, theme, settings, blockId, blockInstanceId, appId
 
 - `context` — `BlockContext` (`{ slotId, … }`); narrow to `ModelSlotContext` for
   model-page slots.
-- `viewer` — `ViewerInfo | null` (`null` = anonymous).
+- `viewer` — `ViewerInfo | null` (`null` = anonymous). **Gate sign-in with
+  `isSignedIn(viewer)`** (from `@civitai/app-sdk/blocks`), never on
+  `viewer.id`/`viewer.username` (both `@deprecated`). Don't open-code the gate:
+  the SDK owns which spelling is correct — `signedIn` is optional on the wire
+  and is the one viewer field the init validator deliberately does not reject
+  when malformed, so `isSignedIn` answers from presence instead. Hover it for
+  the full reasoning. Need the identity itself? Use
+  [`useViewer()`](#useviewer) — scope-gated and audited per call.
 - `theme` — `'light' | 'dark'`. **Set `data-theme={theme}` on your root** (gotcha #60).
   LIVE: it starts at the `BLOCK_INIT` value and then tracks the host's
   `THEME_CHANGE` push when the viewer toggles dark mode mid-session — see
@@ -153,6 +163,12 @@ const rootRef = useRef<HTMLDivElement>(null);
 useBlockResize(rootRef);
 ```
 
+**The element may mount on a later render, and that is the normal case** — a
+block renders a skeleton until `BLOCK_INIT` lands. The hook keys on the observed
+*element*, so you do **not** need to pin the same `ref` to every branch of a
+loading/ready conditional to keep the host resizing. Put it on the root you
+actually want measured, in whichever branch renders it.
+
 > Also set `iframe.minHeight` in your manifest to the block's *real* rendered
 > height — a too-small minHeight makes the iframe seed short and grow-jump on
 > `BLOCK_READY` (CLS). Measure it in the dev harness (gotcha #53).
@@ -676,18 +692,72 @@ async function onCancel(id: string) {
 
 ### `useAppStorage()`
 
-Per-(block instance, viewer) KV datastore, host-mediated. 64 KB per value,
-50 MB + ~1M rows per app.
+KV datastore, host-mediated. Keys are **namespaced** per (block instance,
+viewer); the byte and row **budgets** are enforced per (**app**, viewer), so
+every instance of one app shares one budget for that viewer.
 
 ```tsx
+import {
+  APP_STORAGE_MAX_VALUE_BYTES, // largest single value, in wire bytes
+  APP_STORAGE_MAX_BYTES,       // total stored bytes per (app, viewer)
+  APP_STORAGE_MAX_ROWS,        // total rows per (app, viewer)
+} from '@civitai/app-sdk/blocks';
+
 const storage = useAppStorage();
-await storage.set('key', { any: 'json' });   // throws "PAYLOAD_TOO_LARGE" over a limit
+await storage.set('key', { any: 'json' });   // rejects over ANY of the three ceilings
 const v = await storage.get<MyShape>('key'); // null if unset / anon
 await storage.delete('key');                  // idempotent
 const { keys } = await storage.list({ prefix: 'note-' });
 const quota = await storage.getQuota();       // { usedBytes, rowCount, limitBytes, limitRows }
 ```
 
+🔴 **`getQuota()` is the authority; the constants are a snapshot.** These three
+are the ceilings **as of the version of `@civitai/app-sdk` you installed** —
+compiled-in figures, which is the same frozen-number failure mode this page
+used to demonstrate, just with one copy instead of nine. The host can move a
+ceiling without your lockfile changing. So:
+
+- **Render `getQuota()`'s reply**, never a constant, anywhere a viewer sees a
+  number or a code path decides whether a write will fit.
+- **Reach for the constants only where no quota reply is available** — a
+  build-time sanity check, a test fixture, a rough design-time estimate — and
+  treat the answer as "roughly, at install time".
+- **Re-check after any SDK bump**, and expect movement: the per-viewer clamp
+  was sized against a measured distribution and the host says to expect a
+  re-measure. `appStorageLimits.ts` in `@civitai/app-sdk` carries the
+  provenance and a one-liner that re-derives the current values from the host.
+
+Never hard-code a figure of your own: the docs here used to quote the app-wide
+umbrella instead of the per-viewer clamp and were **25x** out on bytes and
+**1000x** out on rows.
+
+🔴 **The ROW ceiling is usually the binding one, and a byte-based "x of y used"
+readout will not see it coming.** A block caching one modest record per item a
+viewer touches exhausts `limitRows` while still holding a small fraction of
+`limitBytes`. Show rows too.
+
+`createMockHost()` defaults to these same ceilings and enforces the per-value
+cap, the byte budget and — since it was added — the **row** budget on write, so
+a row-limit overrun now fails under `dev:mock` where it previously passed and
+failed only in production. Pass `storage: { quotaBytes, limitRows }` to
+simulate something smaller.
+
+⚠️ The mock is **not** gate-for-gate identical to the host. Three known
+divergences:
+
+- the error string a rejection carries
+  ([#343](https://github.com/civitai/civitai-app-starters/issues/343));
+- the byte gate refusing a shrinking overwrite that the host admits
+  ([#345](https://github.com/civitai/civitai-app-starters/issues/345));
+- 🔴 the byte gate counting **wire** bytes where the host counts **stored**
+  bytes — `octet_length(value::jsonb::text)`, larger for every container, up to
+  ~1.5x ([#347](https://github.com/civitai/civitai-app-starters/issues/347)).
+
+Passing under `dev:mock` is evidence, not proof — and note the third one is
+**permissive**: unlike the other two, it lets a write pass locally that
+production will reject. Size your fixtures against `getQuota()`, not against
+what the mock accepted.
+
 ### `useSharedStorage()`
 
 App-scoped, append-only, community-votable SHARED datastore (every viewer sees
@@ -1039,7 +1109,7 @@ import {
 export function App() {
   const { ready, theme } = useBlockContext();
   const rootRef = useRef<HTMLDivElement>(null);
-  if (!ready) return <div ref={rootRef}>Loading…</div>;
+  if (!ready) return <div>Loading…</div>;
 
   return (
     // GOTCHA #60 — theme your OWN root; that's what the pack reads.

package/dist/hooks/useAppStorage.d.ts

@@ -14,9 +14,23 @@ export interface AppStorageListResult {
 export interface AppStorageQuota {
     usedBytes: number;
     rowCount: number;
-    /** Host-enforced ceiling (bytes). Surface in UI so callers don't hard-code 50MB. */
+    /**
+     * Host-enforced byte ceiling for this (app, viewer). **Render THIS, never a
+     * hard-coded figure** — the ceiling moves, and a UI built on a literal goes
+     * quietly wrong rather than loudly wrong. Matches
+     * `APP_STORAGE_MAX_BYTES` from `@civitai/app-sdk/blocks` against the current
+     * host.
+     */
     limitBytes: number;
-    /** Host-enforced row ceiling (~1M today). */
+    /**
+     * Host-enforced row ceiling for this (app, viewer). Same rule: render it.
+     * Matches `APP_STORAGE_MAX_ROWS`.
+     *
+     * 🔴 THIS IS USUALLY THE BINDING ONE. Rows are small; a block caching one
+     * modest record per item a viewer touches exhausts the row ceiling while
+     * still using a small fraction of `limitBytes`, so a byte-only "x of y used"
+     * readout will show plenty of headroom right up to the rejection.
+     */
     limitRows: number;
 }
 export interface UseAppStorage {
@@ -27,9 +41,11 @@ export interface UseAppStorage {
      */
     get<T = unknown>(key: string): Promise<T | null>;
     /**
-     * Upsert a value. Resolves on host ack. Rejects with the host's
-     * `error` string when the value exceeds 64KB, when the per-app 50MB
-     * quota would be crossed, or when the viewer is anonymous.
+     * Upsert a value. Resolves on host ack. Rejects with the host's `error`
+     * string when the value exceeds `APP_STORAGE_MAX_VALUE_BYTES`, when the
+     * per-(app, viewer) byte or ROW ceiling would be crossed
+     * (`APP_STORAGE_MAX_BYTES` / `APP_STORAGE_MAX_ROWS`), or when the viewer is
+     * anonymous. All from `@civitai/app-sdk/blocks`.
      */
     set<T = unknown>(key: string, value: T): Promise<{
         ok: true;
@@ -54,8 +70,10 @@ export interface UseAppStorage {
         cursor?: string;
     }): Promise<AppStorageListResult>;
     /**
-     * Diagnostic: current usage + the v0 ceilings. Build a "X of 50 MB used"
-     * settings widget against this.
+     * Diagnostic: current usage + the host's ceilings. Build an "X of Y used"
+     * settings widget against this — taking **both** numbers from the reply, and
+     * showing ROWS as well as bytes (see {@link AppStorageQuota.limitRows} for
+     * why bytes alone mislead).
      */
     getQuota(): Promise<AppStorageQuota>;
 }
@@ -71,7 +89,20 @@ export interface UseAppStorage {
  * once the transport singleton is created, so it's safe to put in
  * dependency arrays of `useEffect` / `useMemo`.
  *
- * 64 KB per value, 50 MB + ~1M rows per app.
+ * 🔴 THE NAMESPACE AND THE BUDGET ARE SCOPED DIFFERENTLY. Keys are namespaced
+ * per (block instance, viewer) — the tuple above. The BYTE and ROW budgets
+ * (`APP_STORAGE_MAX_BYTES` / `APP_STORAGE_MAX_ROWS`, plus
+ * `APP_STORAGE_MAX_VALUE_BYTES` per value, all from `@civitai/app-sdk/blocks`)
+ * are enforced per (APP, viewer): every instance of the same app draws on ONE
+ * budget for that viewer.
+ *
+ * 🔴 THE CONSTANTS ARE A SNAPSHOT; `getQuota()` IS THE AUTHORITY. They are the
+ * ceilings as of the `@civitai/app-sdk` version you installed — a figure
+ * compiled into a published package is still a frozen figure, and the host can
+ * move a ceiling without your lockfile changing. Render `getQuota()`'s reply
+ * anywhere a viewer sees a number or a code path decides whether a write will
+ * fit; reach for a constant only where no reply is available (a test fixture, a
+ * design-time estimate), and re-check after an SDK bump.
  *
  * @example
  * const storage = useAppStorage();

package/dist/hooks/useAppStorage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAppStorage.d.ts","sourceRoot":"","sources":["../../src/hooks/useAppStorage.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjD;;;;OAIG;IACH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC7D;;;OAGG;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC;;;OAGG;IACH,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,IAAI,aAAa,CAiF7C"}
+{"version":3,"file":"useAppStorage.d.ts","sourceRoot":"","sources":["../../src/hooks/useAppStorage.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjD;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC7D;;;OAGG;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,aAAa,IAAI,aAAa,CAiF7C"}

package/dist/hooks/useAppStorage.js

@@ -14,7 +14,20 @@ import { sendTypedRequest } from '../internal/transport.js';
  * once the transport singleton is created, so it's safe to put in
  * dependency arrays of `useEffect` / `useMemo`.
  *
- * 64 KB per value, 50 MB + ~1M rows per app.
+ * 🔴 THE NAMESPACE AND THE BUDGET ARE SCOPED DIFFERENTLY. Keys are namespaced
+ * per (block instance, viewer) — the tuple above. The BYTE and ROW budgets
+ * (`APP_STORAGE_MAX_BYTES` / `APP_STORAGE_MAX_ROWS`, plus
+ * `APP_STORAGE_MAX_VALUE_BYTES` per value, all from `@civitai/app-sdk/blocks`)
+ * are enforced per (APP, viewer): every instance of the same app draws on ONE
+ * budget for that viewer.
+ *
+ * 🔴 THE CONSTANTS ARE A SNAPSHOT; `getQuota()` IS THE AUTHORITY. They are the
+ * ceilings as of the `@civitai/app-sdk` version you installed — a figure
+ * compiled into a published package is still a frozen figure, and the host can
+ * move a ceiling without your lockfile changing. Render `getQuota()`'s reply
+ * anywhere a viewer sees a number or a code path decides whether a write will
+ * fit; reach for a constant only where no reply is available (a test fixture, a
+ * design-time estimate), and re-check after an SDK bump.
  *
  * @example
  * const storage = useAppStorage();

package/dist/hooks/useAppStorage.js.map

@@ -1 +1 @@
-{"version":3,"file":"useAppStorage.js","sourceRoot":"","sources":["../../src/hooks/useAppStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AA6D5D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAgB,GAAG,EAAE;QACjC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,CAAC,GAAG,CAAc,GAAW;gBAChC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAC7C,wBAAwB,CACzB,CAAC;gBACF,sEAAsE;gBACtE,iEAAiE;gBACjE,qEAAqE;gBACrE,oDAAoD;gBACpD,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAa,CAAC;YAC5C,CAAC;YACD,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,KAAQ;gBAC1C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EACpD,wBAAwB,CACzB,CAAC;gBACF,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;gBACjD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5D,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAW;gBACtB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAChD,2BAA2B,CAC5B,CAAC;gBACF,kBAAkB,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;gBACpD,sEAAsE;gBACtE,uEAAuE;gBACvE,mEAAmE;gBACnE,mEAAmE;gBACnE,oEAAoE;gBACpE,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YACxD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI;gBACb,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT;oBACE,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE;wBACP,MAAM,EAAE,IAAI,EAAE,MAAM;wBACpB,KAAK,EAAE,IAAI,EAAE,KAAK;wBAClB,MAAM,EAAE,IAAI,EAAE,MAAM;qBACrB;iBACF,EACD,yBAAyB,CAC1B,CAAC;gBACF,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;gBACjD,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC5B,GAAG,EAAE,CAAC,CAAC,GAAG;wBACV,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;qBACjC,CAAC,CAAC;oBACH,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,QAAQ;gBACZ,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,EAC1C,0BAA0B,CAC3B,CAAC;gBACF,iBAAiB,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;gBACrD,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC"}
+{"version":3,"file":"useAppStorage.js","sourceRoot":"","sources":["../../src/hooks/useAppStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AA+E5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAgB,GAAG,EAAE;QACjC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,CAAC,GAAG,CAAc,GAAW;gBAChC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAC7C,wBAAwB,CACzB,CAAC;gBACF,sEAAsE;gBACtE,iEAAiE;gBACjE,qEAAqE;gBACrE,oDAAoD;gBACpD,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAa,CAAC;YAC5C,CAAC;YACD,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,KAAQ;gBAC1C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EACpD,wBAAwB,CACzB,CAAC;gBACF,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;gBACjD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5D,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAW;gBACtB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAChD,2BAA2B,CAC5B,CAAC;gBACF,kBAAkB,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;gBACpD,sEAAsE;gBACtE,uEAAuE;gBACvE,mEAAmE;gBACnE,mEAAmE;gBACnE,oEAAoE;gBACpE,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YACxD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI;gBACb,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT;oBACE,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE;wBACP,MAAM,EAAE,IAAI,EAAE,MAAM;wBACpB,KAAK,EAAE,IAAI,EAAE,KAAK;wBAClB,MAAM,EAAE,IAAI,EAAE,MAAM;qBACrB;iBACF,EACD,yBAAyB,CAC1B,CAAC;gBACF,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;gBACjD,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC5B,GAAG,EAAE,CAAC,CAAC,GAAG;wBACV,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;qBACjC,CAAC,CAAC;oBACH,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,QAAQ;gBACZ,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,SAAS,EACT,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,EAC1C,0BAA0B,CAC3B,CAAC;gBACF,iBAAiB,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;gBACrD,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC"}

package/dist/hooks/useBlockContext.d.ts

@@ -25,10 +25,14 @@ declare function useTransportSnapshot(): BlockSnapshot;
  * moves (today's behaviour).
  *
  * @example
+ * import { isSignedIn } from '@civitai/app-sdk/blocks';
  * const { ready, context, viewer, theme, settings } = useBlockContext();
  * if (!ready) return <div>Loading…</div>;
  * // Set data-theme on YOUR root — the host can't reach into the iframe (gotcha #60).
- * return <div data-theme={theme}>Hi {viewer?.username ?? 'anon'}</div>;
+ * // Sign-in gate: call `isSignedIn`. NOT `viewer?.username` — an identity read
+ * // standing in for a presence check, on a field that is `@deprecated` and
+ * // scheduled for removal. This snippet used to do exactly that.
+ * return <div data-theme={theme}>{isSignedIn(viewer) ? 'Hi there' : 'Hi anon'}</div>;
  */
 export declare function useBlockContext(): Pick<BlockSnapshot, 'ready' | 'renderMode' | 'context' | 'token' | 'settings' | 'viewer' | 'theme' | 'blockId' | 'blockInstanceId' | 'appId'>;
 /** Re-exported so other hooks in this package can share the subscription. */

package/dist/hooks/useBlockContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBlockContext.d.ts","sourceRoot":"","sources":["../../src/hooks/useBlockContext.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D;;;GAGG;AACH,iBAAS,oBAAoB,IAAI,aAAa,CAS7C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,eAAe,IAAI,IAAI,CACrC,aAAa,EACX,OAAO,GACP,YAAY,GACZ,SAAS,GACT,OAAO,GACP,UAAU,GACV,QAAQ,GACR,OAAO,GACP,SAAS,GACT,iBAAiB,GACjB,OAAO,CACV,CAcA;AAED,6EAA6E;AAC7E,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"useBlockContext.d.ts","sourceRoot":"","sources":["../../src/hooks/useBlockContext.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D;;;GAGG;AACH,iBAAS,oBAAoB,IAAI,aAAa,CAS7C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,eAAe,IAAI,IAAI,CACrC,aAAa,EACX,OAAO,GACP,YAAY,GACZ,SAAS,GACT,OAAO,GACP,UAAU,GACV,QAAQ,GACR,OAAO,GACP,SAAS,GACT,iBAAiB,GACjB,OAAO,CACV,CAcA;AAED,6EAA6E;AAC7E,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/hooks/useBlockContext.js

@@ -32,10 +32,14 @@ function useTransportSnapshot() {
  * moves (today's behaviour).
  *
  * @example
+ * import { isSignedIn } from '@civitai/app-sdk/blocks';
  * const { ready, context, viewer, theme, settings } = useBlockContext();
  * if (!ready) return <div>Loading…</div>;
  * // Set data-theme on YOUR root — the host can't reach into the iframe (gotcha #60).
- * return <div data-theme={theme}>Hi {viewer?.username ?? 'anon'}</div>;
+ * // Sign-in gate: call `isSignedIn`. NOT `viewer?.username` — an identity read
+ * // standing in for a presence check, on a field that is `@deprecated` and
+ * // scheduled for removal. This snippet used to do exactly that.
+ * return <div data-theme={theme}>{isSignedIn(viewer) ? 'Hi there' : 'Hi anon'}</div>;
  */
 export function useBlockContext() {
     const snap = useTransportSnapshot();

package/dist/hooks/useBlockContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBlockContext.js","sourceRoot":"","sources":["../../src/hooks/useBlockContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,OAAO,oBAAoB,CACzB,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAC/B,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE;IAC7B,iEAAiE;IACjE,mEAAmE;IACnE,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,eAAe;IAa7B,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"useBlockContext.js","sourceRoot":"","sources":["../../src/hooks/useBlockContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,OAAO,oBAAoB,CACzB,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAC/B,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE;IAC7B,iEAAiE;IACjE,mEAAmE;IACnE,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,eAAe;IAa7B,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/hooks/useBlockResize.d.ts

@@ -9,11 +9,37 @@ import { type RefObject } from 'react';
  * - Inline path: `InlineTransport.sendMessage` is a no-op (the host DOM
  *   reflows naturally), so the observer fires but no message goes out.
  *
+ * 🔴 THE ELEMENT MAY MOUNT ON A LATER RENDER, AND THAT IS THE NORMAL CASE.
+ * Every block renders a skeleton until `BLOCK_INIT` lands, so on the first
+ * render there is nothing to observe. This hook therefore keys on the OBSERVED
+ * ELEMENT, not on the ref wrapper's identity — the same reasoning written down
+ * at `useBlockBreakpoint.ts`'s effect, with one mechanical difference that
+ * matters:
+ *
+ *   `useBlockBreakpoint` can compare `ref.current` read DURING RENDER, because
+ *   it re-renders its own caller and so always gets another render in which to
+ *   notice. This hook re-renders nobody. React attaches a ref during COMMIT,
+ *   i.e. AFTER the render that mounts it, so a `[ref.current]` dependency read
+ *   during render is a render behind and — with no further render coming —
+ *   never catches up. Measured: with `[ref.current]` as the dependency, a
+ *   component that mounts its root on the second render still observes
+ *   nothing.
+ *
+ * So the effect runs on every render (no dependency array) and does its own
+ * identity check against the element it is already observing. The check is a
+ * reference compare; the observer is torn down and rebuilt only when the
+ * element actually changes.
+ *
+ * Because of this, a block does NOT need to pin the same `ref` to every branch
+ * of a loading/ready conditional to keep the host resizing. That workaround was
+ * load-bearing before this fix and is not any more.
+ *
  * @param ref - Ref to the block's root DOM element to observe.
  *
  * @example
  * const rootRef = useRef<HTMLDivElement>(null);
  * useBlockResize(rootRef);              // host fits the iframe to content
+ * if (!ready) return <div>Loading…</div>;   // no ref needed on this branch
  * return <div ref={rootRef}>…</div>;
  */
 export declare function useBlockResize(ref: RefObject<HTMLElement | null>): void;

package/dist/hooks/useBlockResize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBlockResize.d.ts","sourceRoot":"","sources":["../../src/hooks/useBlockResize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAIlD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,IAAI,CAiBvE"}
+{"version":3,"file":"useBlockResize.d.ts","sourceRoot":"","sources":["../../src/hooks/useBlockResize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAI1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,IAAI,CAyCvE"}

package/dist/hooks/useBlockResize.js

@@ -1,4 +1,4 @@
-import { useEffect } from 'react';
+import { useEffect, useRef } from 'react';
 import { getTransport } from '../internal/singleton.js';
 /**
  * Observes the referenced element's height and asks the host to resize on
@@ -10,20 +10,67 @@ import { getTransport } from '../internal/singleton.js';
  * - Inline path: `InlineTransport.sendMessage` is a no-op (the host DOM
  *   reflows naturally), so the observer fires but no message goes out.
  *
+ * 🔴 THE ELEMENT MAY MOUNT ON A LATER RENDER, AND THAT IS THE NORMAL CASE.
+ * Every block renders a skeleton until `BLOCK_INIT` lands, so on the first
+ * render there is nothing to observe. This hook therefore keys on the OBSERVED
+ * ELEMENT, not on the ref wrapper's identity — the same reasoning written down
+ * at `useBlockBreakpoint.ts`'s effect, with one mechanical difference that
+ * matters:
+ *
+ *   `useBlockBreakpoint` can compare `ref.current` read DURING RENDER, because
+ *   it re-renders its own caller and so always gets another render in which to
+ *   notice. This hook re-renders nobody. React attaches a ref during COMMIT,
+ *   i.e. AFTER the render that mounts it, so a `[ref.current]` dependency read
+ *   during render is a render behind and — with no further render coming —
+ *   never catches up. Measured: with `[ref.current]` as the dependency, a
+ *   component that mounts its root on the second render still observes
+ *   nothing.
+ *
+ * So the effect runs on every render (no dependency array) and does its own
+ * identity check against the element it is already observing. The check is a
+ * reference compare; the observer is torn down and rebuilt only when the
+ * element actually changes.
+ *
+ * Because of this, a block does NOT need to pin the same `ref` to every branch
+ * of a loading/ready conditional to keep the host resizing. That workaround was
+ * load-bearing before this fix and is not any more.
+ *
  * @param ref - Ref to the block's root DOM element to observe.
  *
  * @example
  * const rootRef = useRef<HTMLDivElement>(null);
  * useBlockResize(rootRef);              // host fits the iframe to content
+ * if (!ready) return <div>Loading…</div>;   // no ref needed on this branch
  * return <div ref={rootRef}>…</div>;
  */
 export function useBlockResize(ref) {
+    /** The element the live observer is watching. `null` = watching nothing. */
+    const observedRef = useRef(null);
+    const observerRef = useRef(null);
+    // Unmount-only teardown. Declared FIRST so that on a remount (React
+    // StrictMode's deliberate double-invoke) its cleanup — which clears
+    // `observedRef` — runs before the observe effect's setup re-runs and finds a
+    // clean slate. React runs every cleanup before any setup.
+    useEffect(() => {
+        return () => {
+            observerRef.current?.disconnect();
+            observerRef.current = null;
+            observedRef.current = null;
+        };
+    }, []);
+    // No dependency array on purpose — see the block comment above. The identity
+    // check below, not a dependency list, is what makes this cheap.
     useEffect(() => {
+        if (typeof ResizeObserver === 'undefined')
+            return;
         const el = ref.current;
+        if (el === observedRef.current)
+            return; // already observing exactly this
+        observerRef.current?.disconnect();
+        observerRef.current = null;
+        observedRef.current = el;
         if (!el)
             return;
-        if (typeof ResizeObserver === 'undefined')
-            return;
         const transport = getTransport();
         let lastHeight = -1;
         const observer = new ResizeObserver((entries) => {
@@ -34,7 +81,7 @@ export function useBlockResize(ref) {
             transport.sendMessage({ type: 'RESIZE_IFRAME', payload: { height } });
         });
         observer.observe(el);
-        return () => observer.disconnect();
-    }, [ref]);
+        observerRef.current = observer;
+    });
 }
 //# sourceMappingURL=useBlockResize.js.map

package/dist/hooks/useBlockResize.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBlockResize.js","sourceRoot":"","sources":["../../src/hooks/useBlockResize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAkB,MAAM,OAAO,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAAC,GAAkC;IAC/D,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,IAAI,OAAO,cAAc,KAAK,WAAW;YAAE,OAAO;QAElD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;YAC5E,IAAI,MAAM,KAAK,UAAU;gBAAE,OAAO;YAClC,UAAU,GAAG,MAAM,CAAC;YACpB,SAAS,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrB,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;IACrC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACZ,CAAC"}
+{"version":3,"file":"useBlockResize.js","sourceRoot":"","sources":["../../src/hooks/useBlockResize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAkB,MAAM,OAAO,CAAC;AAE1D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,UAAU,cAAc,CAAC,GAAkC;IAC/D,4EAA4E;IAC5E,MAAM,WAAW,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,MAAM,CAAwB,IAAI,CAAC,CAAC;IAExD,oEAAoE;IACpE,oEAAoE;IACpE,6EAA6E;IAC7E,0DAA0D;IAC1D,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,EAAE;YACV,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;YAClC,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC;YAC3B,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC;QAC7B,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6EAA6E;IAC7E,gEAAgE;IAChE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,cAAc,KAAK,WAAW;YAAE,OAAO;QAElD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;QACvB,IAAI,EAAE,KAAK,WAAW,CAAC,OAAO;YAAE,OAAO,CAAC,iCAAiC;QAEzE,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;QAClC,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC;QAC3B,WAAW,CAAC,OAAO,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;YAC5E,IAAI,MAAM,KAAK,UAAU;gBAAE,OAAO;YAClC,UAAU,GAAG,MAAM,CAAC;YACpB,SAAS,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrB,WAAW,CAAC,OAAO,GAAG,QAAQ,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/internal/liveHost.d.ts

@@ -47,7 +47,9 @@
  * tRPC procedures (publicProcedure + verifyBlockToken, FLAT `{ blockToken, … }`
  * input). Reads need the `apps:storage:read` scope, writes `apps:storage:write`
  * — the dev token already carries whatever the local manifest declared, and the
- * server enforces. Real per-(block_instance, user) KV, real 64KB/50MB quotas.
+ * server enforces. Real KV — keys namespaced per (block_instance, user), byte
+ * and row budgets enforced per (app, user) — with the REAL ceilings, so a
+ * write this host accepts is one production would accept.
  *
  * SET_USER_CHECKPOINT (Phase 4): FORWARDED (faithful) to the block-token
  * `blocks.updateUserSettings` mutation — never fabricated. The default page

package/dist/internal/liveHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"liveHost.d.ts","sourceRoot":"","sources":["../../src/internal/liveHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,UAAU,EAGhB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,KAAK,EAAE,QAAQ,EAAyC,MAAM,eAAe,CAAC;AACrF,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAK5B;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,wEAAwE;IACxE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,UAAU,CAAC;IACpC;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;CACvD;AAQD;;;;;GAKG;AACH,UAAU,wBAAwB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAgB/E;AAyHD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,QAAQ,CAu9CjE"}
+{"version":3,"file":"liveHost.d.ts","sourceRoot":"","sources":["../../src/internal/liveHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AAEH,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,UAAU,EAGhB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,KAAK,EAAE,QAAQ,EAAyC,MAAM,eAAe,CAAC;AACrF,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAK5B;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,wEAAwE;IACxE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,UAAU,CAAC;IACpC;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;CACvD;AAQD;;;;;GAKG;AACH,UAAU,wBAAwB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAgB/E;AAyHD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,QAAQ,CAw9CjE"}

package/dist/internal/liveHost.js

@@ -47,7 +47,9 @@
  * tRPC procedures (publicProcedure + verifyBlockToken, FLAT `{ blockToken, … }`
  * input). Reads need the `apps:storage:read` scope, writes `apps:storage:write`
  * — the dev token already carries whatever the local manifest declared, and the
- * server enforces. Real per-(block_instance, user) KV, real 64KB/50MB quotas.
+ * server enforces. Real KV — keys namespaced per (block_instance, user), byte
+ * and row budgets enforced per (app, user) — with the REAL ceilings, so a
+ * write this host accepts is one production would accept.
  *
  * SET_USER_CHECKPOINT (Phase 4): FORWARDED (faithful) to the block-token
  * `blocks.updateUserSettings` mutation — never fabricated. The default page
@@ -396,10 +398,9 @@ export function createLiveHost(options) {
                     return anonFallbackViewer();
                 // `/api/v1/blocks/me` is the AUTHORITATIVE self-read and does carry
                 // `status` — but this builds `BLOCK_INIT.viewer`, which the real host
-                // projects down to `{ id, username }` today (civitai/civitai `main`'s
-                // `projectBlockInitViewer`), and to `{ id, username, signedIn }` once
-                // civitai/civitai#3707 (OPEN, unmerged) lands. Never moderation state,
-                // in either version (civitai #2521). Forwarding `me.status` here would
+                // projects down to exactly `{ id, username, signedIn }` (civitai/civitai
+                // `main`'s `withSignedInFlag`). Never moderation state (civitai #2521).
+                // Forwarding `me.status` here would
                 // make the live dev host more generous than production. A block that
                 // wants `status` must ask for it via `GET_VIEWER` / `useViewer()`, which
                 // is exactly the scope-gated path this release steers authors to.
@@ -1012,7 +1013,9 @@ export function createLiveHost(options) {
                     }
                     case 'APP_STORAGE_SET': {
                         // Mutation apps.storage.set {blockToken, key, value} (POST). The
-                        // server enforces apps:storage:write + the 64KB/50MB quotas.
+                        // server enforces apps:storage:write + the per-value cap and both
+                        // per-(app, viewer) budgets — no simulation here, so nothing to
+                        // keep in sync.
                         const key = typed.payload?.key ?? '';
                         const value = typed.payload?.value;
                         void callTrpcData('apps.storage.set', { blockToken: rawToken, key, value }, 'POST').then((r) => {
@@ -1461,23 +1464,21 @@ export function createLiveHost(options) {
 /**
  * A minimal anon-ish viewer used when `/api/v1/blocks/me` can't be reached.
  *
- * Carries EXACTLY `{ id, username, signedIn }` — the key set the BLOCK_INIT
- * contract is moving to. The two halves have different provenance:
+ * Carries EXACTLY `{ id, username, signedIn }` — byte-for-byte the key set the
+ * real host puts on the wire:
  *
- *  - NO `status` is production TODAY. civitai/civitai `main`'s
- *    `projectBlockInitViewer` builds `{ id, username }`, pinned as exactly
- *    `['id', 'username']` by `__tests__/projectBlockInit.test.ts`. The platform
- *    withholds the viewer's moderation state from third-party iframes (civitai
- *    #2521), so a dev host that sends it invites a block to read a field
- *    production never provides.
- *  - `signedIn` is NOT production yet. It appears zero times under
- *    `src/components/AppBlocks/` on `main`; it arrives with civitai/civitai#3707
- *    (OPEN, unmerged), which also moves the host's pinned key set to
- *    `['id', 'signedIn', 'username']`. Emitted here so the field is exercisable
- *    locally ahead of the host — `viewer !== null` is still the gate to SHIP.
+ *  - NO `status`. The platform withholds the viewer's moderation state from
+ *    third-party iframes (civitai #2521), so a dev host that sent it would
+ *    invite a block to read a field production never provides.
+ *  - WITH `signedIn: true`. civitai/civitai `main`'s `withSignedInFlag`
+ *    (`src/components/AppBlocks/projectBlockInit.ts`) stamps it on every
+ *    present viewer from BOTH host surfaces, and that repo's
+ *    `__tests__/projectBlockInit.test.ts` pins the viewer key set as exactly
+ *    `['id', 'signedIn', 'username']`.
  *
- * See {@link DEFAULT_VIEWER} in `mockHost` for the same note and for what to
- * unwind if #3707 is abandoned.
+ * 🔴 THE PROPERTY THIS FENCE HOLDS: the dev hosts must not be more generous
+ * than the host they imitate — this default MATCHES the host, it does not run
+ * ahead of it. See `DEFAULT_VIEWER` in `mockHost` for the same note.
  */
 function anonFallbackViewer() {
     return { id: 0, username: 'dev-live', signedIn: true };