@civitai/blocks-react 0.6.0 → 0.8.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Civitai
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/hooks/useResourcePicker.d.ts

@@ -0,0 +1,38 @@
+import type { BlockResourceInfo, BlockResourcePickerType } from '@civitai/app-sdk/blocks';
+/**
+ * Drives the platform-side resource picker for PAGE App Blocks (Design 1 —
+ * host-chrome). Generalizes {@link useCheckpointPicker} from Checkpoint-only to
+ * a typed allowlist (v1: `'Checkpoint' | 'LORA'`), so a page block can let the
+ * USER pick a checkpoint + LoRAs instead of the author hard-coding version IDs.
+ *
+ * `open` asks the host to open its OWN native resource modal filtered to the
+ * requested type (+ optional base-model family). The viewer searches in HOST
+ * chrome — the block never sees the catalog, a list, or any resource it didn't
+ * pick. Resolves with the chosen {@link BlockResourceInfo}, or `null` when the
+ * user dismissed without picking.
+ *
+ * DISCOVERY ONLY: the returned `versionId` is a hint, never an entitlement.
+ * Feed it into `body.modelVersionId` (Checkpoint) or
+ * `body.additionalResources` (LoRA) and submit — the host re-validates every id
+ * server-side at estimate/submit (the page gate + orchestrator belt). A block
+ * can POST any id regardless of what the picker showed; the spend path is the
+ * enforcement boundary, not the picker.
+ *
+ * Host-mediated, same trust model as `useCheckpointPicker` / `useBuzzWorkflow`:
+ * the block never touches the picker UI directly.
+ */
+export declare function useResourcePicker(): {
+    open: (opts: {
+        /** Which resource type to pick. v1: `'Checkpoint' | 'LORA'` only — the
+         * host rejects any other type (the modal never opens). */
+        resourceType: BlockResourcePickerType;
+        /**
+         * Optional base-model family hint — an ecosystem key (e.g. 'Flux1', 'SDXL')
+         * OR a baseModel name (e.g. 'Flux.1 D'); the host collapses it to the
+         * ecosystem family. Use the chosen checkpoint's `baseModel` to constrain a
+         * LoRA pick to the same family. Omit for an unconstrained pick of the type.
+         */
+        baseModelGroup?: string;
+    }) => Promise<BlockResourceInfo | null>;
+};
+//# sourceMappingURL=useResourcePicker.d.ts.map

package/dist/hooks/useResourcePicker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useResourcePicker.d.ts","sourceRoot":"","sources":["../../src/hooks/useResourcePicker.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAK1F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,IAAI;IACnC,IAAI,EAAE,CAAC,IAAI,EAAE;QACX;kEAC0D;QAC1D,YAAY,EAAE,uBAAuB,CAAC;QACtC;;;;;WAKG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,KAAK,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;CACzC,CAsBA"}

package/dist/hooks/useResourcePicker.js

@@ -0,0 +1,41 @@
+import { useCallback } from 'react';
+import { getTransport } from '../internal/singleton.js';
+import { sendTypedRequest } from '../internal/transport.js';
+/**
+ * Drives the platform-side resource picker for PAGE App Blocks (Design 1 —
+ * host-chrome). Generalizes {@link useCheckpointPicker} from Checkpoint-only to
+ * a typed allowlist (v1: `'Checkpoint' | 'LORA'`), so a page block can let the
+ * USER pick a checkpoint + LoRAs instead of the author hard-coding version IDs.
+ *
+ * `open` asks the host to open its OWN native resource modal filtered to the
+ * requested type (+ optional base-model family). The viewer searches in HOST
+ * chrome — the block never sees the catalog, a list, or any resource it didn't
+ * pick. Resolves with the chosen {@link BlockResourceInfo}, or `null` when the
+ * user dismissed without picking.
+ *
+ * DISCOVERY ONLY: the returned `versionId` is a hint, never an entitlement.
+ * Feed it into `body.modelVersionId` (Checkpoint) or
+ * `body.additionalResources` (LoRA) and submit — the host re-validates every id
+ * server-side at estimate/submit (the page gate + orchestrator belt). A block
+ * can POST any id regardless of what the picker showed; the spend path is the
+ * enforcement boundary, not the picker.
+ *
+ * Host-mediated, same trust model as `useCheckpointPicker` / `useBuzzWorkflow`:
+ * the block never touches the picker UI directly.
+ */
+export function useResourcePicker() {
+    const open = useCallback(async (opts) => {
+        const { selected } = await sendTypedRequest(getTransport(), {
+            type: 'OPEN_RESOURCE_PICKER',
+            payload: {
+                resourceType: opts.resourceType,
+                ...(opts.baseModelGroup != null ? { baseModelGroup: opts.baseModelGroup } : {}),
+            },
+        }, 'RESOURCE_PICKER_RESULT');
+        // Normalize the "dismissed" case to an explicit null so callers can
+        // `if (!picked) return;` without an `undefined` ambiguity.
+        return selected ?? null;
+    }, []);
+    return { open };
+}
+//# sourceMappingURL=useResourcePicker.js.map

package/dist/hooks/useResourcePicker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useResourcePicker.js","sourceRoot":"","sources":["../../src/hooks/useResourcePicker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAIpC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,iBAAiB;IAc/B,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,IAAwE,EAAE,EAAE;QACjF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CACzC,YAAY,EAAE,EACd;YACE,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE;gBACP,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF;SACF,EACD,wBAAwB,CACzB,CAAC;QACF,oEAAoE;QACpE,2DAA2D;QAC3D,OAAO,QAAQ,IAAI,IAAI,CAAC;IAC1B,CAAC,EACD,EAAE,CACH,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC"}

package/dist/index.d.ts

@@ -20,6 +20,7 @@ export { useBuzzWorkflow } from './hooks/useBuzzWorkflow.js';
 export { useBlockResize } from './hooks/useBlockResize.js';
 export { useBuzzPurchase } from './hooks/useBuzzPurchase.js';
 export { useCheckpointPicker } from './hooks/useCheckpointPicker.js';
+export { useResourcePicker } from './hooks/useResourcePicker.js';
 export { useCivitaiNavigate } from './hooks/useCivitaiNavigate.js';
 export { useRequestSignIn } from './hooks/useRequestSignIn.js';
 export { useRequestConsent } from './hooks/useRequestConsent.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,YAAY,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EACV,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,aAAa,GACd,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,YAAY,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EACV,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,aAAa,GACd,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -18,6 +18,7 @@ export { useBuzzWorkflow } from './hooks/useBuzzWorkflow.js';
 export { useBlockResize } from './hooks/useBlockResize.js';
 export { useBuzzPurchase } from './hooks/useBuzzPurchase.js';
 export { useCheckpointPicker } from './hooks/useCheckpointPicker.js';
+export { useResourcePicker } from './hooks/useResourcePicker.js';
 export { useCivitaiNavigate } from './hooks/useCivitaiNavigate.js';
 export { useRequestSignIn } from './hooks/useRequestSignIn.js';
 export { useRequestConsent } from './hooks/useRequestConsent.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAG3F,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAO3D,QAAQ;AACR,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAG3F,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAO3D,QAAQ;AACR,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/internal/mockHost.d.ts

@@ -0,0 +1,138 @@
+/**
+ * `createMockHost` — a framework-agnostic, test-and-dev-only fake of the
+ * civitai.com embedding host.
+ *
+ * The real host (civitai/civitai `IframeHost.tsx` / `PageBlockHost.tsx`) mounts
+ * a block in a cross-origin iframe and answers its `postMessage` protocol:
+ * mints a token, runs the lazy-consent round-trip, brokers the orchestrator
+ * money path (estimate → submit → poll), opens the native Buzz-purchase and
+ * resource-picker modals. Locally — in a `vitest` test OR a starter's dev
+ * harness — there is no host, so this plays one.
+ *
+ * It is the portable core that the React `<Harness>` (a.k.a. `<MockHostProvider>`
+ * in `../testing`) wraps. Every block app used to hand-roll ~250 lines of this;
+ * now they configure it with {@link MockHostOptions} instead.
+ *
+ * Mechanism (mirrors the gen-matrix reference Harness):
+ *  1. Patches `window.parent.postMessage` via `Object.defineProperty(window,
+ *     'parent', …)` so the block's OUTBOUND messages are intercepted.
+ *  2. Replies as `MessageEvent`s fired from `window.location.origin` — the SDK
+ *     `IframeTransport` DROPS any inbound message whose `origin` ≠ the allowed
+ *     parent origin, so a block using this in dev MUST allow
+ *     `window.location.origin` (the React `<Harness>` is documented for that).
+ *  3. Dispatches a configurable `BLOCK_INIT`, then answers the full protocol.
+ *
+ * NOT a real RS256 JWT, NO real Buzz, NO orchestrator — only the bridge
+ * round-trips are exercised. Never import this from production code.
+ */
+import type { BlockContext, BlockResourceInfo, BlockResourcePickerType, Theme, ViewerInfo } from '@civitai/app-sdk/blocks';
+/**
+ * How submits resolve. `'none'` = everything succeeds; `'all'` /
+ * `'insufficient'` = every submit returns an insufficient-Buzz `failed`
+ * snapshot (exercises the per-cell Top-Up CTA); `'some'` = ~1 in 3 submits
+ * fail (a mixed grid).
+ */
+export type MockHostFailMode = 'none' | 'some' | 'all' | 'insufficient';
+/**
+ * A canned resource the mock host "returns" from `OPEN_RESOURCE_PICKER`.
+ * Mirrors the host's narrow `BlockResourceInfo` projection (versionId/modelId/
+ * names/baseModel/modelType). Returning `undefined`/`null` simulates a
+ * user-dismissed picker (→ `RESOURCE_PICKER_RESULT` with no `selected`).
+ */
+export type CannedPick = BlockResourceInfo;
+/**
+ * Drives `createMockHost`. Every field is optional with a sensible default so
+ * `createMockHost()` works out of the box. Each block configures SCENARIOS
+ * here instead of forking the host code.
+ */
+export interface MockHostOptions {
+    /**
+     * The signed-in viewer, or `null` for anonymous (→ sign-in CTA). Defaults to
+     * a `dev-viewer`. Pass `null` to exercise the anon path.
+     */
+    viewer?: ViewerInfo | null;
+    /**
+     * Start WITH the consent-gated `ai:write:budgeted` scope already granted. The
+     * real mint WITHHOLDS it until the viewer consents, so this defaults to
+     * `false` — the first token carries NO budgeted scope, and `REQUEST_CONSENT`
+     * grants it + pushes a `TOKEN_REFRESH` (the lazy-consent round-trip).
+     */
+    consentGranted?: boolean;
+    /** How submits resolve. Default `'none'` (all succeed). */
+    failMode?: MockHostFailMode;
+    /**
+     * Canned picks keyed by requested resource type, returned from
+     * `OPEN_RESOURCE_PICKER`. A `null`/absent entry simulates a dismissed picker
+     * for that type. Defaults to a curated Checkpoint + LoRA pick.
+     */
+    cannedPicks?: Partial<Record<BlockResourcePickerType, CannedPick | null>>;
+    /** Number of `POLL_WORKFLOW` round-trips before a workflow succeeds. Default 2. */
+    pollsUntilDone?: number;
+    /** The `cost.total` reported on estimate + succeeded snapshots. Default 8. */
+    cost?: number;
+    /** The Buzz budget reported on a granted token. Default 200. */
+    buzzBudget?: number;
+    /** Host theme delivered in `BLOCK_INIT` + context. Default `'dark'`. */
+    theme?: Theme;
+    /**
+     * The `BLOCK_INIT` context. Defaults to a PAGE context
+     * (`{ slotId: 'app.page' }`). Pass a `ModelSlotContext` for a model-slot
+     * block. `theme` is merged in from {@link MockHostOptions.theme}.
+     */
+    context?: BlockContext;
+    /**
+     * Forward-compat hook for a future content-domain / maturity field on
+     * `BLOCK_INIT`. Stored verbatim and surfaced on the init payload's context
+     * under `domain` / `maturity` so a block can read it once the platform ships
+     * the field — inert until then.
+     */
+    domain?: string;
+    /** @see {@link MockHostOptions.domain} */
+    maturity?: string;
+    /** Identity fields delivered in `BLOCK_INIT`. Sensible dev defaults. */
+    blockInstanceId?: string;
+    blockId?: string;
+    appId?: string;
+    /**
+     * Called with every intercepted OUTBOUND message (`{ type, payload }`) — the
+     * React `<Harness>` uses this to render its on-screen message log. RESIZE
+     * messages are included; filter them out in the callback if undesired.
+     */
+    onOutbound?: (msg: {
+        type: string;
+        payload?: unknown;
+    }) => void;
+    /**
+     * Override `window`. Defaults to `globalThis.window`. Tests pass happy-dom's
+     * window; the dev harness uses the default.
+     */
+    window?: Window & typeof globalThis;
+}
+/** Handle returned by {@link createMockHost}. Call `install()` to patch the
+ * host in; it returns the `uninstall()` that restores `window.parent` and
+ * removes timers. Idempotent — calling `install()` twice returns the same
+ * teardown; `uninstall()` is safe to call more than once. */
+export interface MockHost {
+    install: () => () => void;
+}
+/**
+ * Reads the URL query toggles the gen-matrix dev harness uses, so a starter's
+ * dev harness keeps working with `?viewer/?consent/?fail/?theme/?pick/?pickCkpt`.
+ * Returns a partial overlay applied ON TOP of explicit {@link MockHostOptions}
+ * (URL wins — it's the interactive dev knob). No-op outside a browser.
+ */
+export declare function readMockHostUrlOptions(win?: (Window & typeof globalThis) | undefined): Partial<MockHostOptions>;
+/**
+ * Create a framework-agnostic mock host. Call the returned `install()` to patch
+ * `window.parent` + start answering the block's protocol; it returns an
+ * `uninstall()` teardown (restores `window.parent`, clears timers). Safe to use
+ * from a node/jsdom/happy-dom test OR a browser dev harness.
+ *
+ * @example
+ * const host = createMockHost({ failMode: 'some', pollsUntilDone: 1 });
+ * const uninstall = host.install();
+ * // … drive the block / assertions …
+ * uninstall();
+ */
+export declare function createMockHost(options?: MockHostOptions): MockHost;
+//# sourceMappingURL=mockHost.d.ts.map

package/dist/internal/mockHost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mockHost.d.ts","sourceRoot":"","sources":["../../src/internal/mockHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EACV,YAAY,EAEZ,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,EACL,UAAU,EAEX,MAAM,yBAAyB,CAAC;AAKjC;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,cAAc,CAAC;AAExE;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAE3C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1E,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;OAIG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,UAAU,CAAC;CACrC;AAED;;;6DAG6D;AAC7D,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,MAAM,IAAI,CAAC;CAC3B;AAsBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,CAAC,MAAM,GAAG,OAAO,UAAU,CAAC,GAAG,SAC3B,GACR,OAAO,CAAC,eAAe,CAAC,CAsC1B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,GAAE,eAAoB,GAAG,QAAQ,CAqQtE"}

package/dist/internal/mockHost.js

@@ -0,0 +1,334 @@
+/**
+ * `createMockHost` — a framework-agnostic, test-and-dev-only fake of the
+ * civitai.com embedding host.
+ *
+ * The real host (civitai/civitai `IframeHost.tsx` / `PageBlockHost.tsx`) mounts
+ * a block in a cross-origin iframe and answers its `postMessage` protocol:
+ * mints a token, runs the lazy-consent round-trip, brokers the orchestrator
+ * money path (estimate → submit → poll), opens the native Buzz-purchase and
+ * resource-picker modals. Locally — in a `vitest` test OR a starter's dev
+ * harness — there is no host, so this plays one.
+ *
+ * It is the portable core that the React `<Harness>` (a.k.a. `<MockHostProvider>`
+ * in `../testing`) wraps. Every block app used to hand-roll ~250 lines of this;
+ * now they configure it with {@link MockHostOptions} instead.
+ *
+ * Mechanism (mirrors the gen-matrix reference Harness):
+ *  1. Patches `window.parent.postMessage` via `Object.defineProperty(window,
+ *     'parent', …)` so the block's OUTBOUND messages are intercepted.
+ *  2. Replies as `MessageEvent`s fired from `window.location.origin` — the SDK
+ *     `IframeTransport` DROPS any inbound message whose `origin` ≠ the allowed
+ *     parent origin, so a block using this in dev MUST allow
+ *     `window.location.origin` (the React `<Harness>` is documented for that).
+ *  3. Dispatches a configurable `BLOCK_INIT`, then answers the full protocol.
+ *
+ * NOT a real RS256 JWT, NO real Buzz, NO orchestrator — only the bridge
+ * round-trips are exercised. Never import this from production code.
+ */
+const DEV_TOKEN = 'dev.mockhost.mock.jwt.NOT.A.REAL.RS256';
+const BUDGETED_SCOPE = 'ai:write:budgeted';
+const DEFAULT_CHECKPOINT_PICK = {
+    versionId: 691639,
+    modelId: 618692,
+    modelName: 'FLUX.1 [dev]',
+    versionName: 'fp8',
+    baseModel: 'Flux.1 D',
+    modelType: 'Checkpoint',
+};
+const DEFAULT_LORA_PICK = {
+    versionId: 666002,
+    modelId: 555002,
+    modelName: 'Sinfully Stylish',
+    versionName: 'v2.0',
+    baseModel: 'SDXL 1.0',
+    modelType: 'LORA',
+};
+const DEFAULT_VIEWER = { id: 2, username: 'dev-viewer', status: 'active' };
+/**
+ * Reads the URL query toggles the gen-matrix dev harness uses, so a starter's
+ * dev harness keeps working with `?viewer/?consent/?fail/?theme/?pick/?pickCkpt`.
+ * Returns a partial overlay applied ON TOP of explicit {@link MockHostOptions}
+ * (URL wins — it's the interactive dev knob). No-op outside a browser.
+ */
+export function readMockHostUrlOptions(win = globalThis
+    .window) {
+    if (!win?.location?.search)
+        return {};
+    const params = new URLSearchParams(win.location.search);
+    const out = {};
+    if (params.get('viewer') === 'anon')
+        out.viewer = null;
+    if (params.get('consent') === 'granted')
+        out.consentGranted = true;
+    const fail = params.get('fail');
+    if (fail === 'insufficient' || fail === 'some' || fail === 'all' || fail === 'none') {
+        out.failMode = fail;
+    }
+    if (params.get('theme') === 'light')
+        out.theme = 'light';
+    else if (params.get('theme') === 'dark')
+        out.theme = 'dark';
+    // ?pick (LoRA) / ?pickCkpt (Checkpoint): 'cancel' → dismissed; 'pony' → an
+    // incompatible Pony LoRA; any other value → the default curated pick.
+    const pick = params.get('pick');
+    const pickCkpt = params.get('pickCkpt');
+    if (pick || pickCkpt) {
+        const cannedPicks = {};
+        if (pick === 'cancel')
+            cannedPicks.LORA = null;
+        else if (pick === 'pony')
+            cannedPicks.LORA = {
+                versionId: 555001,
+                modelId: 444001,
+                modelName: 'Incompatible Pony LoRA',
+                versionName: 'v1.0',
+                baseModel: 'Pony',
+                modelType: 'LORA',
+            };
+        else if (pick)
+            cannedPicks.LORA = DEFAULT_LORA_PICK;
+        if (pickCkpt === 'cancel')
+            cannedPicks.Checkpoint = null;
+        else if (pickCkpt)
+            cannedPicks.Checkpoint = DEFAULT_CHECKPOINT_PICK;
+        out.cannedPicks = cannedPicks;
+    }
+    return out;
+}
+/**
+ * Create a framework-agnostic mock host. Call the returned `install()` to patch
+ * `window.parent` + start answering the block's protocol; it returns an
+ * `uninstall()` teardown (restores `window.parent`, clears timers). Safe to use
+ * from a node/jsdom/happy-dom test OR a browser dev harness.
+ *
+ * @example
+ * const host = createMockHost({ failMode: 'some', pollsUntilDone: 1 });
+ * const uninstall = host.install();
+ * // … drive the block / assertions …
+ * uninstall();
+ */
+export function createMockHost(options = {}) {
+    const maybeWin = options.window ?? globalThis.window;
+    if (!maybeWin) {
+        throw new Error('createMockHost: no window available (call from a DOM environment).');
+    }
+    // Bind to a non-nullable local so the `install()` closure keeps the narrowing.
+    const win = maybeWin;
+    const viewer = options.viewer === undefined ? DEFAULT_VIEWER : options.viewer;
+    const failMode = options.failMode ?? 'none';
+    const pollsUntilDone = options.pollsUntilDone ?? 2;
+    const cost = options.cost ?? 8;
+    const buzzBudget = options.buzzBudget ?? 200;
+    const theme = options.theme ?? 'dark';
+    const cannedPicks = options.cannedPicks ?? { Checkpoint: DEFAULT_CHECKPOINT_PICK, LORA: DEFAULT_LORA_PICK };
+    const blockInstanceId = options.blockInstanceId ?? 'page_mock';
+    const blockId = options.blockId ?? 'mock-block';
+    const appId = options.appId ?? 'app_dev';
+    let installed = false;
+    let teardown = () => { };
+    function install() {
+        if (installed)
+            return teardown;
+        installed = true;
+        const parentOrigin = win.location.origin;
+        const originalParent = win.parent;
+        let consentGranted = !!options.consentGranted;
+        let tokenSerial = 0;
+        let submitCount = 0;
+        const workflows = new Map();
+        const timers = new Set();
+        const dispatchToBlock = (data) => {
+            win.dispatchEvent(new MessageEvent('message', { data, origin: parentOrigin }));
+        };
+        const nextToken = () => {
+            tokenSerial += 1;
+            return {
+                raw: `${DEV_TOKEN}.${tokenSerial}`,
+                scopes: consentGranted ? [BUDGETED_SCOPE] : [],
+                expiresAt: new Date(Date.now() + 15 * 60_000).toISOString(),
+                ...(consentGranted ? { buzzBudget } : {}),
+            };
+        };
+        const succeededSnapshot = (workflowId) => ({
+            workflowId,
+            status: 'succeeded',
+            cost: { total: cost },
+            imageUrls: [
+                `https://placehold.co/512x512/1971c2/ffffff/png?text=${encodeURIComponent(workflowId.slice(-4))}`,
+            ],
+        });
+        const parentMock = {
+            postMessage: (msg) => {
+                if (typeof msg !== 'object' ||
+                    msg === null ||
+                    typeof msg.type !== 'string') {
+                    return;
+                }
+                const typed = msg;
+                options.onOutbound?.({ type: typed.type, payload: typed.payload });
+                const requestId = typed.payload?.requestId;
+                switch (typed.type) {
+                    case 'REQUEST_TOKEN':
+                        dispatchToBlock({
+                            type: 'TOKEN_REFRESH_RESPONSE',
+                            payload: { ...(requestId ? { requestId } : {}), token: nextToken() },
+                        });
+                        return;
+                    case 'REQUEST_CONSENT': {
+                        // Lazy-consent round-trip: grant the scope, then push a
+                        // host-initiated TOKEN_REFRESH carrying it (the App's auto-resume
+                        // depends on seeing the new scope on its token).
+                        consentGranted = true;
+                        const t = setTimeout(() => {
+                            dispatchToBlock({ type: 'TOKEN_REFRESH', payload: { token: nextToken() } });
+                        }, 0);
+                        timers.add(t);
+                        return;
+                    }
+                    case 'REQUEST_SIGN_IN':
+                        // The real host opens its login UI; nothing to reply.
+                        return;
+                    case 'ESTIMATE_WORKFLOW':
+                        dispatchToBlock({
+                            type: 'ESTIMATE_RESULT',
+                            payload: {
+                                requestId,
+                                snapshot: { workflowId: 'wf_estimate', status: 'pending', cost: { total: cost } },
+                            },
+                        });
+                        return;
+                    case 'SUBMIT_WORKFLOW': {
+                        submitCount += 1;
+                        const failThis = failMode === 'all' ||
+                            failMode === 'insufficient' ||
+                            (failMode === 'some' && submitCount % 3 === 0);
+                        if (failThis) {
+                            dispatchToBlock({
+                                type: 'WORKFLOW_SUBMITTED',
+                                payload: {
+                                    requestId,
+                                    snapshot: {
+                                        workflowId: `wf_fail_${submitCount}`,
+                                        status: 'failed',
+                                        error: 'Insufficient Buzz to run this generation.',
+                                    },
+                                },
+                            });
+                            return;
+                        }
+                        const workflowId = `wf_${submitCount}_${Date.now()}`;
+                        workflows.set(workflowId, { polls: 0 });
+                        dispatchToBlock({
+                            type: 'WORKFLOW_SUBMITTED',
+                            payload: { requestId, snapshot: { workflowId, status: 'pending' } },
+                        });
+                        return;
+                    }
+                    case 'POLL_WORKFLOW': {
+                        const workflowId = typed.payload?.workflowId ?? '';
+                        const wf = workflows.get(workflowId);
+                        const polls = (wf?.polls ?? 0) + 1;
+                        if (wf)
+                            wf.polls = polls;
+                        const snapshot = polls >= pollsUntilDone
+                            ? succeededSnapshot(workflowId)
+                            : { workflowId, status: 'processing' };
+                        dispatchToBlock({ type: 'WORKFLOW_STATUS', payload: { requestId, snapshot } });
+                        return;
+                    }
+                    case 'CANCEL_WORKFLOW': {
+                        const workflowId = typed.payload?.workflowId ?? '';
+                        workflows.delete(workflowId);
+                        dispatchToBlock({
+                            type: 'WORKFLOW_CANCELED',
+                            payload: { requestId, snapshot: { workflowId, status: 'canceled' } },
+                        });
+                        return;
+                    }
+                    case 'OPEN_BUZZ_PURCHASE':
+                        dispatchToBlock({
+                            type: 'BUZZ_PURCHASE_RESULT',
+                            payload: { requestId, purchased: true, newBalance: 1000 },
+                        });
+                        return;
+                    case 'OPEN_CHECKPOINT_PICKER': {
+                        const selected = cannedPicks.Checkpoint;
+                        dispatchToBlock({
+                            type: 'CHECKPOINT_PICKER_RESULT',
+                            payload: {
+                                requestId,
+                                ...(selected
+                                    ? {
+                                        selected: {
+                                            versionId: selected.versionId,
+                                            modelId: selected.modelId,
+                                            modelName: selected.modelName,
+                                            versionName: selected.versionName,
+                                            baseModel: selected.baseModel,
+                                        },
+                                    }
+                                    : {}),
+                            },
+                        });
+                        return;
+                    }
+                    case 'OPEN_RESOURCE_PICKER': {
+                        const rtype = typed.payload?.resourceType;
+                        const selected = rtype ? cannedPicks[rtype] : undefined;
+                        dispatchToBlock({
+                            type: 'RESOURCE_PICKER_RESULT',
+                            payload: { requestId, ...(selected ? { selected } : {}) },
+                        });
+                        return;
+                    }
+                    default:
+                        return;
+                }
+            },
+        };
+        Object.defineProperty(win, 'parent', {
+            value: parentMock,
+            configurable: true,
+            writable: true,
+        });
+        // Merge theme + forward-compat domain/maturity into the init context.
+        const baseContext = options.context ?? { slotId: 'app.page' };
+        const context = {
+            ...baseContext,
+            theme,
+            ...(options.domain !== undefined ? { domain: options.domain } : {}),
+            ...(options.maturity !== undefined ? { maturity: options.maturity } : {}),
+        };
+        const initPayload = {
+            blockInstanceId,
+            blockId,
+            appId,
+            token: nextToken(),
+            context,
+            settings: { publisherSettings: {}, userSettings: {} },
+            viewer,
+            theme,
+            renderMode: 'iframe',
+        };
+        const initTimer = setTimeout(() => dispatchToBlock({ type: 'BLOCK_INIT', payload: initPayload }), 0);
+        timers.add(initTimer);
+        let torn = false;
+        teardown = () => {
+            if (torn)
+                return;
+            torn = true;
+            installed = false;
+            for (const t of timers)
+                clearTimeout(t);
+            timers.clear();
+            Object.defineProperty(win, 'parent', {
+                value: originalParent,
+                configurable: true,
+                writable: true,
+            });
+        };
+        return teardown;
+    }
+    return { install };
+}
+//# sourceMappingURL=mockHost.js.map

package/dist/internal/mockHost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mockHost.js","sourceRoot":"","sources":["../../src/internal/mockHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAYH,MAAM,SAAS,GAAG,wCAAwC,CAAC;AAC3D,MAAM,cAAc,GAAG,mBAAmB,CAAC;AA4F3C,MAAM,uBAAuB,GAAe;IAC1C,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,MAAM;IACf,SAAS,EAAE,cAAc;IACzB,WAAW,EAAE,KAAK;IAClB,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,YAAY;CACxB,CAAC;AAEF,MAAM,iBAAiB,GAAe;IACpC,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,MAAM;IACf,SAAS,EAAE,kBAAkB;IAC7B,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,MAAM;CAClB,CAAC;AAEF,MAAM,cAAc,GAAe,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAEvF;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAiD,UAAsD;KACpG,MAAM;IAET,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,GAAG,GAA6B,EAAE,CAAC;IAEzC,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;IACvD,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC;IAEnE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpF,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,OAAO;QAAE,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC;SACpD,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,MAAM;QAAE,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC;IAE5D,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;QACrB,MAAM,WAAW,GAAgE,EAAE,CAAC;QACpF,IAAI,IAAI,KAAK,QAAQ;YAAE,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC;aAC1C,IAAI,IAAI,KAAK,MAAM;YACtB,WAAW,CAAC,IAAI,GAAG;gBACjB,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,wBAAwB;gBACnC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE,MAAM;aAClB,CAAC;aACC,IAAI,IAAI;YAAE,WAAW,CAAC,IAAI,GAAG,iBAAiB,CAAC;QACpD,IAAI,QAAQ,KAAK,QAAQ;YAAE,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC;aACpD,IAAI,QAAQ;YAAE,WAAW,CAAC,UAAU,GAAG,uBAAuB,CAAC;QACpE,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,UAA2B,EAAE;IAC1D,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,IAAK,UAAsD,CAAC,MAAM,CAAC;IACnF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,+EAA+E;IAC/E,MAAM,GAAG,GAA+B,QAAQ,CAAC;IAEjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9E,MAAM,QAAQ,GAAqB,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;IAC9D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC;IAC7C,MAAM,KAAK,GAAU,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;IAC7C,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,IAAI,EAAE,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC1F,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,WAAW,CAAC;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IAEzC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,QAAQ,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IAEpC,SAAS,OAAO;QACd,IAAI,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC/B,SAAS,GAAG,IAAI,CAAC;QAEjB,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzC,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC;QAClC,IAAI,cAAc,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9C,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;QAExD,MAAM,eAAe,GAAG,CAAC,IAAa,EAAE,EAAE;YACxC,GAAG,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,GAAiB,EAAE;YACnC,WAAW,IAAI,CAAC,CAAC;YACjB,OAAO;gBACL,GAAG,EAAE,GAAG,SAAS,IAAI,WAAW,EAAE;gBAClC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC9C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;gBAC3D,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAE,EAAE,CAAC,CAAC;YACjD,UAAU;YACV,MAAM,EAAE,WAAoB;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;YACrB,SAAS,EAAE;gBACT,uDAAuD,kBAAkB,CACvE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACrB,EAAE;aACJ;SACF,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG;YACjB,WAAW,EAAE,CAAC,GAAY,EAAE,EAAE;gBAC5B,IACE,OAAO,GAAG,KAAK,QAAQ;oBACvB,GAAG,KAAK,IAAI;oBACZ,OAAQ,GAA0B,CAAC,IAAI,KAAK,QAAQ,EACpD,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,GAOb,CAAC;gBAEF,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAEnE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;gBAE3C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;oBACnB,KAAK,eAAe;wBAClB,eAAe,CAAC;4BACd,IAAI,EAAE,wBAAwB;4BAC9B,OAAO,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;yBACrE,CAAC,CAAC;wBACH,OAAO;oBAET,KAAK,iBAAiB,CAAC,CAAC,CAAC;wBACvB,wDAAwD;wBACxD,kEAAkE;wBAClE,iDAAiD;wBACjD,cAAc,GAAG,IAAI,CAAC;wBACtB,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;4BACxB,eAAe,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC9E,CAAC,EAAE,CAAC,CAAC,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;wBACd,OAAO;oBACT,CAAC;oBAED,KAAK,iBAAiB;wBACpB,sDAAsD;wBACtD,OAAO;oBAET,KAAK,mBAAmB;wBACtB,eAAe,CAAC;4BACd,IAAI,EAAE,iBAAiB;4BACvB,OAAO,EAAE;gCACP,SAAS;gCACT,QAAQ,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;6BAClF;yBACF,CAAC,CAAC;wBACH,OAAO;oBAET,KAAK,iBAAiB,CAAC,CAAC,CAAC;wBACvB,WAAW,IAAI,CAAC,CAAC;wBACjB,MAAM,QAAQ,GACZ,QAAQ,KAAK,KAAK;4BAClB,QAAQ,KAAK,cAAc;4BAC3B,CAAC,QAAQ,KAAK,MAAM,IAAI,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;wBACjD,IAAI,QAAQ,EAAE,CAAC;4BACb,eAAe,CAAC;gCACd,IAAI,EAAE,oBAAoB;gCAC1B,OAAO,EAAE;oCACP,SAAS;oCACT,QAAQ,EAAE;wCACR,UAAU,EAAE,WAAW,WAAW,EAAE;wCACpC,MAAM,EAAE,QAAQ;wCAChB,KAAK,EAAE,2CAA2C;qCACnD;iCACF;6BACF,CAAC,CAAC;4BACH,OAAO;wBACT,CAAC;wBACD,MAAM,UAAU,GAAG,MAAM,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBACrD,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;wBACxC,eAAe,CAAC;4BACd,IAAI,EAAE,oBAAoB;4BAC1B,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;yBACpE,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBAED,KAAK,eAAe,CAAC,CAAC,CAAC;wBACrB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;wBACnD,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACrC,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;wBACnC,IAAI,EAAE;4BAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC;wBACzB,MAAM,QAAQ,GACZ,KAAK,IAAI,cAAc;4BACrB,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC;4BAC/B,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,YAAqB,EAAE,CAAC;wBACpD,eAAe,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;wBAC/E,OAAO;oBACT,CAAC;oBAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;wBACvB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;wBACnD,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;wBAC7B,eAAe,CAAC;4BACd,IAAI,EAAE,mBAAmB;4BACzB,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;yBACrE,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBAED,KAAK,oBAAoB;wBACvB,eAAe,CAAC;4BACd,IAAI,EAAE,sBAAsB;4BAC5B,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;yBAC1D,CAAC,CAAC;wBACH,OAAO;oBAET,KAAK,wBAAwB,CAAC,CAAC,CAAC;wBAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC;wBACxC,eAAe,CAAC;4BACd,IAAI,EAAE,0BAA0B;4BAChC,OAAO,EAAE;gCACP,SAAS;gCACT,GAAG,CAAC,QAAQ;oCACV,CAAC,CAAC;wCACE,QAAQ,EAAE;4CACR,SAAS,EAAE,QAAQ,CAAC,SAAS;4CAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;4CACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;4CAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;4CACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;yCAC9B;qCACF;oCACH,CAAC,CAAC,EAAE,CAAC;6BACR;yBACF,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBAED,KAAK,sBAAsB,CAAC,CAAC,CAAC;wBAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC;wBAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBACxD,eAAe,CAAC;4BACd,IAAI,EAAE,wBAAwB;4BAC9B,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;yBAC1D,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBAED;wBACE,OAAO;gBACX,CAAC;YACH,CAAC;SACF,CAAC;QAEF,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE;YACnC,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,sEAAsE;QACtE,MAAM,WAAW,GAAiB,OAAO,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC5E,MAAM,OAAO,GAAiB;YAC5B,GAAG,WAAW;YACd,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC;QAEF,MAAM,WAAW,GAAqB;YACpC,eAAe;YACf,OAAO;YACP,KAAK;YACL,KAAK,EAAE,SAAS,EAAE;YAClB,OAAO;YACP,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;YACrD,MAAM;YACN,KAAK;YACL,UAAU,EAAE,QAAQ;SACrB,CAAC;QAEF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEtB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,QAAQ,GAAG,GAAG,EAAE;YACd,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS,GAAG,KAAK,CAAC;YAClB,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,YAAY,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE;gBACnC,KAAK,EAAE,cAAc;gBACrB,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC"}

package/dist/testing.d.ts

@@ -1,14 +1,68 @@
 /**
  * Test-only helpers for `@civitai/blocks-react`. Not part of the runtime
- * surface — block apps should never import from here.
+ * surface — block apps should never import from here in production code (the
+ * `./testing` subpath keeps accidental prod imports visible in review).
  *
- * Subpath-exported so accidental production imports show up in code review.
+ * Exposes:
+ *  - `resetTransport` / `mockParentMessage` — low-level test primitives.
+ *  - `createMockHost` — a framework-agnostic fake of the civitai.com embedding
+ *    host (usable from node/jsdom/happy-dom tests AND a dev harness).
+ *  - `<Harness>` / `<MockHostProvider>` — a thin React wrapper that installs a
+ *    mock host for local dev, with an optional on-screen message log.
+ *
+ * These replace the ~250-line per-block hand-rolled harness.
  */
+import { type ReactNode } from 'react';
 import { __resetTransport } from './internal/singleton.js';
+import { type MockHostOptions } from './internal/mockHost.js';
 export { __resetTransport as resetTransport };
+export { createMockHost, readMockHostUrlOptions, type MockHost, type MockHostOptions, type MockHostFailMode, type CannedPick, } from './internal/mockHost.js';
 /**
  * Builds a `MessageEvent` that mimics a parent-frame postMessage so tests can
  * exercise `IframeTransport.handleMessage` without a real cross-frame setup.
  */
 export declare function mockParentMessage(data: unknown, origin: string): MessageEvent;
+/**
+ * Props for the dev `<Harness>` (a.k.a. {@link MockHostProvider}).
+ */
+export interface HarnessProps extends MockHostOptions {
+    /** The block app to render inside the mocked host. */
+    children: ReactNode;
+    /**
+     * Read the gen-matrix URL toggles (`?viewer/?consent/?fail/?theme/?pick/
+     * ?pickCkpt`) and apply them ON TOP of the props (URL wins). Default `true`
+     * so a dev harness stays interactive. Pass `false` in a deterministic test.
+     */
+    applyUrlToggles?: boolean;
+    /**
+     * Render the on-screen outbound-message log panel (bottom-right). Default
+     * `true`. Set `false` to mount the mock host with no chrome.
+     */
+    showLog?: boolean;
+}
+/**
+ * Thin React wrapper that installs a {@link createMockHost} on mount (and tears
+ * it down on unmount) so a block app renders against a fake civitai host for
+ * local dev — no real platform, no real Buzz.
+ *
+ * IMPORTANT: the SDK transport DROPS inbound host messages whose origin isn't
+ * in its allowlist, and the mock host fires from `window.location.origin`. So
+ * a block app using `<Harness>` in dev MUST include its OWN origin in the
+ * transport allowlist, e.g.:
+ *
+ *   VITE_BLOCK_ALLOWED_PARENT_ORIGINS=http://localhost:5173
+ *
+ * (or pass it to `getTransport({ allowedParentOrigins: [window.location.origin] })`
+ * in the harness entrypoint). Otherwise BLOCK_INIT never lands.
+ *
+ * @example
+ * createRoot(el).render(
+ *   <Harness failMode="some">
+ *     <App />
+ *   </Harness>,
+ * );
+ */
+export declare function Harness({ children, applyUrlToggles, showLog, ...options }: HarnessProps): import("react/jsx-runtime").JSX.Element;
+/** Alias of {@link Harness} — same component, clearer name when used as a context provider. */
+export declare const MockHostProvider: typeof Harness;
 //# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,IAAI,cAAc,EAAE,CAAC;AAE9C;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,MAAM,GACb,YAAY,CAEd"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAA+B,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAEpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,gBAAgB,IAAI,cAAc,EAAE,CAAC;AAE9C,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,wBAAwB,CAAC;AAEhC;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAE7E;AAOD;;GAEG;AACH,MAAM,WAAW,YAAa,SAAQ,eAAe;IACnD,sDAAsD;IACtD,QAAQ,EAAE,SAAS,CAAC;IACpB;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,OAAO,CAAC,EACtB,QAAQ,EACR,eAAsB,EACtB,OAAc,EACd,GAAG,OAAO,EACX,EAAE,YAAY,2CAiDd;AAED,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB,gBAAU,CAAC"}

package/dist/testing.js

@@ -1,11 +1,23 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
  * Test-only helpers for `@civitai/blocks-react`. Not part of the runtime
- * surface — block apps should never import from here.
+ * surface — block apps should never import from here in production code (the
+ * `./testing` subpath keeps accidental prod imports visible in review).
  *
- * Subpath-exported so accidental production imports show up in code review.
+ * Exposes:
+ *  - `resetTransport` / `mockParentMessage` — low-level test primitives.
+ *  - `createMockHost` — a framework-agnostic fake of the civitai.com embedding
+ *    host (usable from node/jsdom/happy-dom tests AND a dev harness).
+ *  - `<Harness>` / `<MockHostProvider>` — a thin React wrapper that installs a
+ *    mock host for local dev, with an optional on-screen message log.
+ *
+ * These replace the ~250-line per-block hand-rolled harness.
  */
+import { useEffect, useRef, useState } from 'react';
 import { __resetTransport } from './internal/singleton.js';
+import { createMockHost, readMockHostUrlOptions, } from './internal/mockHost.js';
 export { __resetTransport as resetTransport };
+export { createMockHost, readMockHostUrlOptions, } from './internal/mockHost.js';
 /**
  * Builds a `MessageEvent` that mimics a parent-frame postMessage so tests can
  * exercise `IframeTransport.handleMessage` without a real cross-frame setup.
@@ -13,4 +25,72 @@ export { __resetTransport as resetTransport };
 export function mockParentMessage(data, origin) {
     return new MessageEvent('message', { data, origin, source: null });
 }
+/**
+ * Thin React wrapper that installs a {@link createMockHost} on mount (and tears
+ * it down on unmount) so a block app renders against a fake civitai host for
+ * local dev — no real platform, no real Buzz.
+ *
+ * IMPORTANT: the SDK transport DROPS inbound host messages whose origin isn't
+ * in its allowlist, and the mock host fires from `window.location.origin`. So
+ * a block app using `<Harness>` in dev MUST include its OWN origin in the
+ * transport allowlist, e.g.:
+ *
+ *   VITE_BLOCK_ALLOWED_PARENT_ORIGINS=http://localhost:5173
+ *
+ * (or pass it to `getTransport({ allowedParentOrigins: [window.location.origin] })`
+ * in the harness entrypoint). Otherwise BLOCK_INIT never lands.
+ *
+ * @example
+ * createRoot(el).render(
+ *   <Harness failMode="some">
+ *     <App />
+ *   </Harness>,
+ * );
+ */
+export function Harness({ children, applyUrlToggles = true, showLog = true, ...options }) {
+    const [outbound, setOutbound] = useState([]);
+    // Snapshot the merged options once per mount so the effect's identity is
+    // stable (avoids re-installing the host on every render).
+    const optionsRef = useRef(null);
+    if (optionsRef.current === null) {
+        const urlOverlay = applyUrlToggles ? readMockHostUrlOptions() : {};
+        optionsRef.current = { ...options, ...urlOverlay };
+    }
+    useEffect(() => {
+        const host = createMockHost({
+            ...optionsRef.current,
+            onOutbound: (msg) => {
+                optionsRef.current.onOutbound?.(msg);
+                if (msg.type === 'RESIZE_IFRAME')
+                    return; // noise; skip the log
+                queueMicrotask(() => setOutbound((prev) => [...prev, msg]));
+            },
+        });
+        return host.install();
+    }, []);
+    const opts = optionsRef.current;
+    const anon = opts.viewer === null;
+    const theme = opts.theme ?? 'dark';
+    const consent = opts.consentGranted ? 'granted' : 'withheld';
+    return (_jsxs("div", { "data-harness": "true", style: { position: 'relative', width: '100vw', minHeight: '100dvh' }, children: [_jsx("main", { "data-harness-frame": "true", style: { width: '100%', minHeight: '100%' }, children: children }), showLog && (_jsxs("details", { style: harnessLogStyle, children: [_jsxs("summary", { style: { cursor: 'pointer' }, children: ["DEV HARNESS \u00B7 viewer=", anon ? 'anon' : 'dev-viewer', " \u00B7 consent=", consent, " \u00B7 theme=", theme, " \u00B7 outbound:", outbound.length] }), _jsx("pre", { style: { margin: 0, maxHeight: 200, overflow: 'auto' }, children: outbound.length === 0
+                            ? '// no outbound messages yet'
+                            : outbound
+                                .map((m, i) => `${i + 1}. ${m.type} ${JSON.stringify(m.payload ?? {})}`)
+                                .join('\n') })] }))] }));
+}
+/** Alias of {@link Harness} — same component, clearer name when used as a context provider. */
+export const MockHostProvider = Harness;
+const harnessLogStyle = {
+    position: 'fixed',
+    bottom: 8,
+    right: 8,
+    zIndex: 9999,
+    maxWidth: 520,
+    background: 'rgba(17,17,17,0.92)',
+    color: '#7fc',
+    fontSize: 11,
+    fontFamily: 'ui-monospace, SFMono-Regular, monospace',
+    padding: '6px 10px',
+    borderRadius: 6,
+};
 //# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,IAAI,cAAc,EAAE,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAa,EACb,MAAc;IAEd,OAAO,IAAI,YAAY,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC"}
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAEpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACL,cAAc,EACd,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,gBAAgB,IAAI,cAAc,EAAE,CAAC;AAE9C,OAAO,EACL,cAAc,EACd,sBAAsB,GAKvB,MAAM,wBAAwB,CAAC;AAEhC;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,MAAc;IAC7D,OAAO,IAAI,YAAY,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC;AA0BD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,OAAO,CAAC,EACtB,QAAQ,EACR,eAAe,GAAG,IAAI,EACtB,OAAO,GAAG,IAAI,EACd,GAAG,OAAO,EACG;IACb,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAgB,EAAE,CAAC,CAAC;IAC5D,yEAAyE;IACzE,0DAA0D;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAyB,IAAI,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,UAAU,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,IAAI,GAAG,cAAc,CAAC;YAC1B,GAAG,UAAU,CAAC,OAAQ;YACtB,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;gBAClB,UAAU,CAAC,OAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe;oBAAE,OAAO,CAAC,sBAAsB;gBAChE,cAAc,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9D,CAAC;SACF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,IAAI,GAAG,UAAU,CAAC,OAAQ,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAE7D,OAAO,CACL,+BAAkB,MAAM,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAC3F,qCAAyB,MAAM,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YACxE,QAAQ,GACJ,EACN,OAAO,IAAI,CACV,mBAAS,KAAK,EAAE,eAAe,aAC7B,mBAAS,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,2CACb,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,sBAAa,OAAO,oBAAW,KAAK,uBAC5E,QAAQ,CAAC,MAAM,IACjB,EACV,cAAK,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,YACxD,QAAQ,CAAC,MAAM,KAAK,CAAC;4BACpB,CAAC,CAAC,6BAA6B;4BAC/B,CAAC,CAAC,QAAQ;iCACL,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;iCACvE,IAAI,CAAC,IAAI,CAAC,GACb,IACE,CACX,IACG,CACP,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAExC,MAAM,eAAe,GAAG;IACtB,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,GAAG;IACb,UAAU,EAAE,qBAAqB;IACjC,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,yCAAyC;IACrD,OAAO,EAAE,UAAU;IACnB,YAAY,EAAE,CAAC;CACP,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civitai/blocks-react",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "React hooks and iframe transport for Civitai App Blocks. Pairs with @civitai/app-sdk/blocks.",
   "license": "MIT",
   "type": "module",
@@ -24,21 +24,14 @@
     "dist",
     "README.md"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run",
-    "test:watch": "vitest"
-  },
   "engines": {
     "node": ">=20"
   },
   "peerDependencies": {
-    "@civitai/app-sdk": ">=0.7.0 <1",
+    "@civitai/app-sdk": ">=0.10.0",
     "react": "^18.0.0 || ^19.0.0"
   },
   "devDependencies": {
-    "@civitai/app-sdk": "workspace:^",
     "@testing-library/react": "^16.0.0",
     "@types/node": "^25.9.1",
     "@types/react": "^19.2.15",
@@ -46,7 +39,8 @@
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "typescript": "^5.9.2",
-    "vitest": "^4.1.7"
+    "vitest": "^4.1.7",
+    "@civitai/app-sdk": "^0.12.0"
   },
   "publishConfig": {
     "access": "public"
@@ -65,5 +59,11 @@
     "type": "git",
     "url": "git+https://github.com/civitai/civitai-app-starters.git",
     "directory": "packages/civitai-blocks-react"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
   }
-}
+}