@civitai/blocks-react 0.56.0 → 0.57.0

package/dist/hooks/useViewer.js

@@ -1,6 +1,7 @@
-import { useCallback, useEffect, useRef, useState } from 'react';
-import { getTransport } from '../internal/singleton.js';
-import { sendTypedRequest } from '../internal/transport.js';
+import { useCallback, useEffect, useState } from 'react';
+import { getTransport } from '../transport/singleton.js';
+import { sendTypedRequest } from '../transport/transport.js';
+import { useRequestSequencer } from './useRequestSequencer.js';
 /**
  * Read the signed-in viewer (id / username / status + optional buzzBudget)
  * through the host-mediated `GET_VIEWER` → `VIEWER_RESULT` bridge. Token-bound:
@@ -17,8 +18,9 @@ import { sendTypedRequest } from '../internal/transport.js';
  *
  * Fetches once on mount and exposes `refetch` for on-demand refreshes. A host
  * that never answers surfaces as an `error` after the transport's request
- * timeout — the hook never hangs. Late responses that arrive after unmount are
- * ignored (no state update).
+ * timeout — the hook never hangs. Only the LATEST request may write state: a
+ * reply superseded by a newer `refetch` — or one that lands after unmount — is
+ * dropped (#392).
  *
  * @example
  * const { viewer, loading, error, refetch } = useViewer();
@@ -30,22 +32,18 @@ export function useViewer() {
     const [viewer, setViewer] = useState(null);
     const [loading, setLoading] = useState(true);
     const [error, setError] = useState(null);
-    // Guards against a late response resolving after the component unmounted
-    // (React would warn about a state update on an unmounted component, and the
-    // work is wasted anyway).
-    const mountedRef = useRef(true);
-    useEffect(() => {
-        mountedRef.current = true;
-        return () => {
-            mountedRef.current = false;
-        };
-    }, []);
+    // Latest-wins + unmount guard in one predicate (#392): a reply may write state
+    // only if it answers the request this hook is CURRENTLY waiting for. A bare
+    // mount check would let a superseded `refetch`'s slow reply overwrite newer
+    // state — nothing unmounted, so it passes.
+    const seq = useRequestSequencer();
     const refetch = useCallback(() => {
+        const token = seq.begin();
         setLoading(true);
         setError(null);
         sendTypedRequest(getTransport(), { type: 'GET_VIEWER', payload: {} }, 'VIEWER_RESULT')
             .then((result) => {
-            if (!mountedRef.current)
+            if (!seq.isCurrent(token))
                 return;
             if (result.error || !result.viewer) {
                 // `||`, not `??`: `isValidViewerResult` gates `error` on SHAPE only, so a
@@ -59,12 +57,12 @@ export function useViewer() {
             setLoading(false);
         })
             .catch((err) => {
-            if (!mountedRef.current)
+            if (!seq.isCurrent(token))
                 return;
             setError(err instanceof Error ? err : new Error(String(err)));
             setLoading(false);
         });
-    }, []);
+    }, [seq]);
     useEffect(() => {
         refetch();
     }, [refetch]);

package/dist/hooks/useWildcardPack.d.ts

@@ -39,7 +39,9 @@ export interface UseWildcardPack {
  * to retry a `busy` result). On failure `error` is a {@link WildcardPackError}
  * whose `.code` is the discriminated reason. A non-positive `modelVersionId` is a
  * no-op (nothing to fetch). A host that never answers surfaces as an `error`
- * after the transport timeout; late post-unmount responses are ignored.
+ * after the transport timeout. Only the LATEST request may write state: a reply
+ * superseded by a newer `refetch` / `modelVersionId` change — or one that lands
+ * after unmount — is dropped (#392).
  *
  * @example
  * const { pack, loading, error } = useWildcardPack(modelVersionId);

package/dist/hooks/useWildcardPack.js

@@ -1,6 +1,7 @@
-import { useCallback, useEffect, useRef, useState } from 'react';
-import { getTransport } from '../internal/singleton.js';
-import { sendTypedRequest } from '../internal/transport.js';
+import { useCallback, useEffect, useState } from 'react';
+import { getTransport } from '../transport/singleton.js';
+import { sendTypedRequest } from '../transport/transport.js';
+import { useRequestSequencer } from './useRequestSequencer.js';
 /**
  * A wildcard-pack import failure. Unlike the buzz bridges' free-text errors, the
  * host returns a DISCRIMINATED code — this error carries it on `.code` so a block
@@ -27,7 +28,9 @@ export class WildcardPackError extends Error {
  * to retry a `busy` result). On failure `error` is a {@link WildcardPackError}
  * whose `.code` is the discriminated reason. A non-positive `modelVersionId` is a
  * no-op (nothing to fetch). A host that never answers surfaces as an `error`
- * after the transport timeout; late post-unmount responses are ignored.
+ * after the transport timeout. Only the LATEST request may write state: a reply
+ * superseded by a newer `refetch` / `modelVersionId` change — or one that lands
+ * after unmount — is dropped (#392).
  *
  * @example
  * const { pack, loading, error } = useWildcardPack(modelVersionId);
@@ -37,15 +40,17 @@ export function useWildcardPack(modelVersionId) {
     const [pack, setPack] = useState(null);
     const [loading, setLoading] = useState(true);
     const [error, setError] = useState(null);
-    const mountedRef = useRef(true);
-    useEffect(() => {
-        mountedRef.current = true;
-        return () => {
-            mountedRef.current = false;
-        };
-    }, []);
+    // Latest-wins + unmount guard in one predicate (#392): a reply may write state
+    // only if it answers the request this hook is CURRENTLY waiting for. A bare
+    // mount check would let a superseded request's slow reply overwrite newer
+    // state — nothing unmounted, so it passes.
+    const seq = useRequestSequencer();
     const valid = Number.isInteger(modelVersionId) && modelVersionId > 0;
     const refetch = useCallback(() => {
+        // `begin()` runs BEFORE the validity gate on purpose: moving to a
+        // non-positive id must also SUPERSEDE an in-flight request for the previous
+        // id, or that reply would land and paint a pack the hook no longer wants.
+        const token = seq.begin();
         if (!valid) {
             // Nothing to fetch — don't summon a host round-trip that would only time
             // out (the host drops a non-positive modelVersionId).
@@ -56,7 +61,7 @@ export function useWildcardPack(modelVersionId) {
         setError(null);
         sendTypedRequest(getTransport(), { type: 'GET_WILDCARD_PACK', payload: { modelVersionId } }, 'WILDCARD_PACK_RESULT')
             .then((result) => {
-            if (!mountedRef.current)
+            if (!seq.isCurrent(token))
                 return;
             if (result.error || !result.pack) {
                 // 🔴 KEEP `??` HERE — do NOT "fix" this to `||` like the sibling hooks.
@@ -73,12 +78,12 @@ export function useWildcardPack(modelVersionId) {
             setLoading(false);
         })
             .catch((err) => {
-            if (!mountedRef.current)
+            if (!seq.isCurrent(token))
                 return;
             setError(err instanceof Error ? err : new Error(String(err)));
             setLoading(false);
         });
-    }, [valid, modelVersionId]);
+    }, [valid, modelVersionId, seq]);
     useEffect(() => {
         refetch();
     }, [refetch]);

package/dist/index.d.ts

@@ -6,29 +6,36 @@
  * platform side can integration-test against a real iframe receiver.
  */
 import '@civitai/app-sdk/safe-storage';
-export { IframeTransport } from './internal/iframeTransport.js';
-export type { IframeTransportOptions } from './internal/iframeTransport.js';
-export { InlineTransport } from './internal/inlineTransport.js';
-export { BlockTransportDetector, readAllowedOriginsFromEnv } from './internal/detector.js';
-export type { DetectOptions } from './internal/detector.js';
-export { getTransport } from './internal/singleton.js';
-export { sendTypedRequest } from './internal/transport.js';
-export type { BlockSnapshot, BlockTransport, OutboundRequest, } from './internal/transport.js';
+export { IframeTransport } from './transport/iframeTransport.js';
+export type { IframeTransportOptions } from './transport/iframeTransport.js';
+export { InlineTransport } from './transport/inlineTransport.js';
+export { BlockTransportDetector, readAllowedOriginsFromEnv } from './transport/detector.js';
+export type { DetectOptions } from './transport/detector.js';
+export { getTransport } from './transport/singleton.js';
+export { sendTypedRequest } from './transport/transport.js';
+export type { BlockSnapshot, BlockTransport, OutboundRequest, } from './transport/transport.js';
 export { useBlockContext } from './hooks/useBlockContext.js';
+export type { UseBlockContext } from './hooks/useBlockContext.js';
 export { useBlockTheme } from './hooks/useBlockTheme.js';
+export type { UseBlockTheme } from './hooks/useBlockTheme.js';
 export { useBlockSettings } from './hooks/useBlockSettings.js';
+export type { UseBlockSettings } from './hooks/useBlockSettings.js';
 export { useBlockToken } from './hooks/useBlockToken.js';
+export type { UseBlockToken } from './hooks/useBlockToken.js';
 export { useHostOrigin } from './hooks/useHostOrigin.js';
+export type { UseHostOrigin } from './hooks/useHostOrigin.js';
 export { DEFAULT_WATCH_WAIT_SECONDS, useBuzzWorkflow, WorkflowEstimateError, WorkflowSubmitError, } from './hooks/useBuzzWorkflow.js';
-export type { SubmitWorkflowOptions, WatchWorkflowOptions, WorkflowSubmitErrorCode, } from './hooks/useBuzzWorkflow.js';
+export type { SubmitWorkflowOptions, UseBuzzWorkflow, WatchWorkflowOptions, WorkflowSubmitErrorCode, } from './hooks/useBuzzWorkflow.js';
 export { useTip } from './hooks/useTip.js';
 export type { TipParams, TipOptions, TipResult, UseTip } from './hooks/useTip.js';
 export { useTipAllowance } from './hooks/useTipAllowance.js';
 export type { TipAllowance, UseTipAllowance } from './hooks/useTipAllowance.js';
 export { useBlockResize } from './hooks/useBlockResize.js';
+export type { UseBlockResize } from './hooks/useBlockResize.js';
 export { useBlockBreakpoint, resolveBlockTier } from './hooks/useBlockBreakpoint.js';
-export type { BlockBreakpoint, BlockSizeTier } from './hooks/useBlockBreakpoint.js';
+export type { BlockBreakpoint, BlockSizeTier, UseBlockBreakpoint, } from './hooks/useBlockBreakpoint.js';
 export { useBuzzPurchase } from './hooks/useBuzzPurchase.js';
+export type { UseBuzzPurchase } from './hooks/useBuzzPurchase.js';
 export { useBuzzBalance } from './hooks/useBuzzBalance.js';
 export type { BuzzBalance, UseBuzzBalance } from './hooks/useBuzzBalance.js';
 export { useViewer } from './hooks/useViewer.js';
@@ -49,30 +56,39 @@ export { useGatedImages } from './hooks/useGatedImages.js';
 export type { UseGatedImages } from './hooks/useGatedImages.js';
 export { useSaveImage } from './hooks/useSaveImage.js';
 export type { UseSaveImage, SaveImageInput } from './hooks/useSaveImage.js';
-export { RequestTimeoutError } from './internal/transport.js';
+export { RequestTimeoutError } from './transport/transport.js';
 export { useCollectionFollow, CollectionFollowError, COLLECTION_FOLLOW_ERROR_CODES, isCollectionFollowErrorCode, } from './hooks/useCollectionFollow.js';
 export type { UseCollectionFollow } from './hooks/useCollectionFollow.js';
 export { useCreatePostFromApp, CreatePostError, CREATE_POST_ERROR_CODES, isCreatePostErrorCode, } from './hooks/useCreatePostFromApp.js';
 export type { UseCreatePostFromApp, BlockPostSource, BlockCreatePostRequest, BlockCreatePostResult, BlockCreatePostHostError, } from './hooks/useCreatePostFromApp.js';
 export type { BlockBuzzTransaction, BlockBuzzAccount, BlockDailyCompensationResource, BlockWildcardPack, BlockWildcardPackErrorCode, AppWorkflow, AppWorkflowImage, AppWorkflowsParams, BlockGatedImage, BlockCollectionFollowErrorCode, BlockCollectionFollowResult, } from '@civitai/app-sdk/blocks';
 export { useCheckpointPicker } from './hooks/useCheckpointPicker.js';
+export type { UseCheckpointPicker } from './hooks/useCheckpointPicker.js';
 export { useResourcePicker } from './hooks/useResourcePicker.js';
+export type { UseResourcePicker } from './hooks/useResourcePicker.js';
 export { useImageUpload } from './hooks/useImageUpload.js';
+export type { UseImageUpload, UseImageUploadAsyncScan, UseImageUploadGenerationSource, UseImageUploadOptions, } from './hooks/useImageUpload.js';
 export { useGenerationResources } from './hooks/useGenerationResources.js';
+export type { UseGenerationResources } from './hooks/useGenerationResources.js';
 export { GENERATION_RESOURCES_API_BASE, MAX_GENERATION_RESOURCE_IDS, buildGenerationResourcesUrl, responseToResources, } from './api/generationResources.js';
+export type { RawGenerationResource, RawGenerationResourcesResponse, } from './api/generationResources.js';
 export { useCivitaiNavigate } from './hooks/useCivitaiNavigate.js';
+export type { UseCivitaiNavigate } from './hooks/useCivitaiNavigate.js';
 export { useRequestSignIn } from './hooks/useRequestSignIn.js';
+export type { UseRequestSignIn } from './hooks/useRequestSignIn.js';
 export { useRequestConsent } from './hooks/useRequestConsent.js';
+export type { UseRequestConsent } from './hooks/useRequestConsent.js';
 export { useConsentUnavailable } from './hooks/useConsentUnavailable.js';
 export type { UseConsentUnavailable, ConsentUnavailablePayload, } from './hooks/useConsentUnavailable.js';
 export { useBlockAnalytics } from './hooks/useBlockAnalytics.js';
+export type { UseBlockAnalytics } from './hooks/useBlockAnalytics.js';
 export { useDomainMaturity } from './hooks/useDomainMaturity.js';
-export type { DomainMaturity } from './hooks/useDomainMaturity.js';
+export type { DomainMaturity, UseDomainMaturity } from './hooks/useDomainMaturity.js';
 export { SfwGate } from './hooks/SfwGate.js';
 export type { SfwGateProps } from './hooks/SfwGate.js';
 export { useDirectLoad } from './hooks/useDirectLoad.js';
-export type { UseDirectLoadOptions } from './hooks/useDirectLoad.js';
-export { hostToRunUrl, DIRECT_LOAD_TIMEOUT_MS } from './internal/directLoad.js';
+export type { UseDirectLoad, UseDirectLoadOptions } from './hooks/useDirectLoad.js';
+export { hostToRunUrl, DIRECT_LOAD_TIMEOUT_MS } from './transport/directLoad.js';
 export { useAppStorage } from './hooks/useAppStorage.js';
 export type { AppStorageKeyEntry, AppStorageListResult, AppStorageQuota, UseAppStorage, } from './hooks/useAppStorage.js';
 export { useSharedStorage } from './hooks/useSharedStorage.js';

package/dist/index.js

@@ -12,11 +12,11 @@
 // in-memory `Storage` over those globals when (and only when) they are broken,
 // before the rest of the app's module graph runs. Inert everywhere else.
 import '@civitai/app-sdk/safe-storage';
-export { IframeTransport } from './internal/iframeTransport.js';
-export { InlineTransport } from './internal/inlineTransport.js';
-export { BlockTransportDetector, readAllowedOriginsFromEnv } from './internal/detector.js';
-export { getTransport } from './internal/singleton.js';
-export { sendTypedRequest } from './internal/transport.js';
+export { IframeTransport } from './transport/iframeTransport.js';
+export { InlineTransport } from './transport/inlineTransport.js';
+export { BlockTransportDetector, readAllowedOriginsFromEnv } from './transport/detector.js';
+export { getTransport } from './transport/singleton.js';
+export { sendTypedRequest } from './transport/transport.js';
 // Hooks
 export { useBlockContext } from './hooks/useBlockContext.js';
 export { useBlockTheme } from './hooks/useBlockTheme.js';
@@ -42,7 +42,7 @@ export { useSaveImage } from './hooks/useSaveImage.js';
 // Exported because `sendTypedRequest` (also exported) can throw it, and its own
 // JSDoc says consumers need to distinguish "no reply" from "the host said no" —
 // which they cannot do if they cannot name the type.
-export { RequestTimeoutError } from './internal/transport.js';
+export { RequestTimeoutError } from './transport/transport.js';
 export { useCollectionFollow, CollectionFollowError, COLLECTION_FOLLOW_ERROR_CODES, isCollectionFollowErrorCode, } from './hooks/useCollectionFollow.js';
 export { useCreatePostFromApp, CreatePostError, CREATE_POST_ERROR_CODES, isCreatePostErrorCode, } from './hooks/useCreatePostFromApp.js';
 export { useCheckpointPicker } from './hooks/useCheckpointPicker.js';
@@ -58,7 +58,7 @@ export { useBlockAnalytics } from './hooks/useBlockAnalytics.js';
 export { useDomainMaturity } from './hooks/useDomainMaturity.js';
 export { SfwGate } from './hooks/SfwGate.js';
 export { useDirectLoad } from './hooks/useDirectLoad.js';
-export { hostToRunUrl, DIRECT_LOAD_TIMEOUT_MS } from './internal/directLoad.js';
+export { hostToRunUrl, DIRECT_LOAD_TIMEOUT_MS } from './transport/directLoad.js';
 export { useAppStorage } from './hooks/useAppStorage.js';
 export { useSharedStorage } from './hooks/useSharedStorage.js';
 //# sourceMappingURL=index.js.map

package/dist/internal/consentRefusalLatch.d.ts

@@ -1,5 +1,5 @@
 import type { ConsentUnavailablePayload } from '@civitai/app-sdk/blocks';
-import type { BlockTransport } from './transport.js';
+import type { BlockTransport } from '../transport/transport.js';
 /**
  * Install the latch's subscription on `transport` if it is not already the
  * transport we are latching for. Idempotent per transport instance.

package/dist/internal/consentRefusalLatch.js

@@ -1,4 +1,4 @@
-import { subscribeTyped } from './transport.js';
+import { subscribeTyped } from '../transport/transport.js';
 let latched = null;
 let installedOn = null;
 /**

package/dist/internal/liveHost.d.ts

@@ -24,12 +24,31 @@
  *     viewer, decodes the token JWT payload for the block identity / scopes /
  *     budget / maturity, and dispatches `BLOCK_INIT`.
  *
- * REAL NETWORK, REAL MONEY: unlike the mock host, this calls `fetch`. The only
- * network it does is (a) `GET /api/v1/blocks/me` and (b) the four
- * `blocks.{estimate,submit,poll,cancel}Workflow` tRPC mutations — each with the
- * Bearer dev token. A successful submit SPENDS the dev's OWN real Buzz against
- * real compute. The token's per-call budget + the per-user daily cap are the
- * server-side bounds (scope doc §4).
+ * REAL NETWORK, REAL MONEY: unlike the mock host, this calls `fetch`. Every
+ * call is Bearer-authed with the dev token and leaves this file through one of
+ * exactly two chokepoints — {@link rawTrpcCall} (every tRPC procedure) and the
+ * `/api/v1/blocks/me` viewer read in `resolveViewer`. A successful submit
+ * SPENDS the dev's OWN real Buzz against real compute. The token's per-call
+ * budget + the per-user daily cap are the server-side bounds (scope doc §4).
+ * (The picker overlay does its own catalog fetch — that lives in
+ * `pickerOverlay.ts`, not here; see PICKERS below.)
+ *
+ * 🔴 THE BLOCK BELOW IS DERIVED FROM THIS FILE. DO NOT HAND-EDIT IT — and do
+ * not re-introduce a typed "the only X is …" list anywhere in this header.
+ * This file grew from 5 network calls to 30 and from 1 refusal to 7 while the
+ * header still said "the only network it does is … the four `blocks.*Workflow`
+ * mutations" and "the ONE capability live mode cannot SERVE" (#387, #14). An
+ * exhaustive count typed into a 2,100-line file that grows every release is a
+ * claim nobody re-measures. So it is measured:
+ * `tests/guards/livehost-header-enumerations.test.mjs` regenerates the block
+ * from the code and fails with the exact replacement text when it drifts.
+ *
+ * --- BEGIN DERIVED ---
+ * fetch chokepoints ..... 2
+ * REST endpoints ........ GET /api/v1/blocks/me
+ * tRPC procedures ....... 29 = blocks.* (14) + apps.shared.* (10) + apps.storage.* (5)
+ * switch case labels .... 45, of which 7 REFUSE (enumerated under SCOPE below)
+ * --- END DERIVED ---
  *
  * PICKERS (Phase 1 of "make dev:live a faithful local host"): the live host
  * SERVES the resource pickers locally. On `OPEN_CHECKPOINT_PICKER` /
@@ -57,11 +76,44 @@
  * honest error "block token lacks modelId context"; that real outcome is
  * surfaced to the block. With a model-slot token it persists for real.
  *
- * SCOPE — the ONE capability live mode still cannot SERVE is OPEN_BUZZ_PURCHASE:
- * there is NO headless / block-token Buzz-purchase path (buying Buzz strictly
- * requires the interactive Stripe/Paddle host chrome). So it deep-links the real
- * purchase page and replies `purchased: false` — honest-by-design, never a
- * fabricated success. See the per-message handlers below.
+ * SHARED STORAGE (#386): the live host SERVES all TEN `SHARED_*` bridges —
+ * `apps.shared.{list,get,getCount,getCounts,append,update,vote,unvote,withdraw,
+ * report}` — on the same block-token convention as APP_STORAGE. `SHARED_GET`
+ * and `SHARED_REPORT` were the last two missing; until #386 they fell through
+ * the switch's `default: return` with no reply at all, so `useSharedStorage()`
+ * hung to the 30s protocol timeout in dev:live for code that worked in dev:mock.
+ *
+ * 🔴 SCOPE — the capabilities live mode still cannot SERVE. Each REFUSES on its
+ * own reply channel — `logOnce` (or `console.info`) plus an honest error, never
+ * a fabricated success and never silence. Two guards stand behind this list:
+ * `tests/guards/livehost-message-coverage.test.mjs` asserts that no block→parent
+ * type is left without a case at all (the failure mode a refusal is NOT), and
+ * `tests/guards/livehost-header-enumerations.test.mjs` derives the refusal set
+ * from the handlers below and asserts these bullets are exactly it — so the
+ * list cannot silently go stale again the way it did through #14/#387. Add a
+ * refusal handler without a bullet, or leave a bullet whose handler now serves,
+ * and that guard fails naming the difference.
+ *
+ *   • OPEN_BUZZ_PURCHASE — no headless / block-token Buzz-purchase path (buying
+ *     Buzz strictly requires the interactive Stripe/Paddle host chrome). Deep-
+ *     links the real purchase page and replies `purchased: false`.
+ *   • SET_COLLECTION_FOLLOW — needs the session-authed follow procedures plus
+ *     host-chrome consent. Replies `collection-unavailable`.
+ *   • CREATE_POST_FROM_APP — needs the server-resolved preview plus host-chrome
+ *     confirm before a PUBLIC post is written. Replies with a refusal.
+ *   • GET_WILDCARD_PACK — needs the session-authed resolve plus the in-tab
+ *     zip/yaml parse that lives in civitai, not this SDK. Replies `parse-failed`.
+ *   • OPEN_IMAGE_UPLOAD — needs the host's native modal + session-authed byte
+ *     pipeline. Replies DISMISSED (the hook resolves `null`).
+ *   • SAVE_IMAGE — the download bridge is the production host's unsandboxed top
+ *     frame plus its CDN origin allowlist / gated per-viewer read. Replies with
+ *     a refusal (#386).
+ *   • REQUEST_CONSENT — live mode cannot grant a scope the token does not carry.
+ *     Pushes `CONSENT_UNAVAILABLE` when the ask is genuinely ungrantable.
+ *
+ * In every case REFUSING IS THE POINT: serving a weakened local imitation would
+ * let a block prove out a flow production does not have, and ship having never
+ * handled the refusal. Use dev:mock for those paths. See the handlers below.
  */
 import { type BlockContext, type ColorDomain, type Theme, type ViewerInfo } from '@civitai/app-sdk/blocks';
 import type { MockHost } from './mockHost.js';