@civitai/blocks-react 0.70.0 → 0.72.0

package/dist/transport/validate.js

@@ -334,6 +334,87 @@ export function isValidWorkflowSnapshot(s) {
         return false;
     if (s.trainingQuote !== undefined && !isValidTrainingQuote(s.trainingQuote))
         return false;
+    if (s.stepQuote !== undefined && !isValidStepQuote(s.stepQuote))
+        return false;
+    if (s.model3dOutputs !== undefined && !isValidModel3dOutputs(s.model3dOutputs))
+        return false;
+    if (s.steps !== undefined && !isValidWorkflowSteps(s.steps))
+        return false;
+    return true;
+}
+/**
+ * Shape check for `stepQuote` — the viewer-confirmable quote a pass-through
+ * `step` estimate returns when its fixed price is above the per-call budget. The
+ * block passes `quoteId` back verbatim, renders `total` on its confirm button
+ * and may show `stepType`, so all three are pinned to their types.
+ *
+ * `quoteId`'s `sq_…` FORMAT is deliberately not pinned HERE, for the reason
+ * given on {@link isValidTrainingQuote}: a host changing the handle's format
+ * must not turn every such estimate reply into a dropped one. The format is
+ * checked where it is an instruction rather than an observation — on the way
+ * OUT, in `useRunConfirmedStep()`.
+ */
+function isValidStepQuote(q) {
+    if (!isObject(q))
+        return false;
+    if (!isNonEmptyString(q.quoteId))
+        return false;
+    if (!isFiniteNumber(q.total))
+        return false;
+    if (typeof q.stepType !== 'string')
+        return false;
+    return typeof q.expiresAt === 'string';
+}
+/**
+ * Shape check for `model3dOutputs` — shared by {@link isValidWorkflowSnapshot}
+ * and the `AppWorkflow` row guard, which carry the same field. A block matches
+ * an entry's `url` against its image list and loads it, and branches on
+ * `format` / `variant`, so each is pinned to a string. `format` and `variant`
+ * are OPEN sets (the orchestrator's own format names and output field paths)
+ * and are never checked against a list; `variant` may be the empty string.
+ */
+function isValidModel3dOutputs(outputs) {
+    if (!Array.isArray(outputs))
+        return false;
+    for (const o of outputs) {
+        if (!isObject(o) || !isNonEmptyString(o.url))
+            return false;
+        if (typeof o.format !== 'string' || typeof o.variant !== 'string')
+            return false;
+    }
+    return true;
+}
+/**
+ * Shape check for `steps` — the per-step view of a `kind: 'workflow'` run.
+ * OPTIONAL like its neighbours, and a PRESENT but malformed value rejects the
+ * snapshot: the block reads `name`, `$type`, `status` and `imageUrls` off every
+ * entry.
+ *
+ * `status` is checked against the SAME closed set as the snapshot's own
+ * `status`, unlike the open string unions above: it is typed as that closed
+ * union and a block `switch`es on it, so a snapshot carrying any other value is
+ * dropped rather than handed over. `output` is `unknown` by contract and is not
+ * inspected.
+ */
+function isValidWorkflowSteps(steps) {
+    if (!Array.isArray(steps))
+        return false;
+    for (const step of steps) {
+        if (!isObject(step))
+            return false;
+        if (typeof step.name !== 'string' || typeof step.$type !== 'string')
+            return false;
+        if (typeof step.status !== 'string' || !WORKFLOW_STATUSES.has(step.status))
+            return false;
+        if (step.imageUrls !== undefined) {
+            if (!Array.isArray(step.imageUrls))
+                return false;
+            if (!step.imageUrls.every((u) => typeof u === 'string'))
+                return false;
+        }
+        if (step.error !== undefined && typeof step.error !== 'string')
+            return false;
+    }
     return true;
 }
 /**
@@ -998,6 +1079,8 @@ function isValidAppWorkflow(w) {
         return false;
     if (w.trainedEpochs !== undefined && !isValidTrainedEpochs(w.trainedEpochs))
         return false;
+    if (w.model3dOutputs !== undefined && !isValidModel3dOutputs(w.model3dOutputs))
+        return false;
     return true;
 }
 /**
@@ -1400,6 +1483,31 @@ export function isValidTrainingResult(p) {
         return false;
     return true;
 }
+/**
+ * Reply to `RUN_CONFIRMED_STEP`. A well-formed reply carries EITHER a `snapshot`
+ * (a valid {@link isValidWorkflowSnapshot} — the block polls its `workflowId`)
+ * OR an `error`; one with neither is malformed and dropped.
+ *
+ * 🔴 `error` IS SHAPE-CHECKED ONLY, for the reason given on
+ * {@link isValidTrainingResult}: this request carries the same TEN-MINUTE
+ * consent bound, and the host forwards server refusals (an expired or used
+ * quote, a changed body or price, the feature flag) in the same field as its own
+ * codes. A membership check would drop those and leave a Run button spinning for
+ * ten minutes.
+ */
+export function isValidConfirmedStepResult(p) {
+    if (!isObject(p))
+        return false;
+    if (!isWireRequestIdShape(p.requestId))
+        return false;
+    if (p.error !== undefined && typeof p.error !== 'string')
+        return false;
+    if (p.snapshot !== undefined && !isValidWorkflowSnapshot(p.snapshot))
+        return false;
+    if (p.snapshot === undefined && p.error === undefined)
+        return false;
+    return true;
+}
 // ============================================================
 // App-storage (per-viewer KV) reply validators
 // ============================================================
@@ -2009,6 +2117,9 @@ export function payloadValidatorFor(type) {
             return isValidTrainingDatasetResult;
         case 'TRAINING_RESULT':
             return isValidTrainingResult;
+        // Settles a charged job, like TRAINING_RESULT directly above.
+        case 'CONFIRMED_STEP_RESULT':
+            return isValidConfirmedStepResult;
         case 'IMAGE_UPLOAD_RESULT':
             return isValidImageUploadResult;
         case 'IMAGE_SCAN_RESOLVED':

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civitai/blocks-react",
-  "version": "0.70.0",
+  "version": "0.72.0",
   "description": "React hooks and iframe transport for Civitai Apps. Pairs with @civitai/app-sdk/blocks.",
   "license": "MIT",
   "type": "module",
@@ -37,8 +37,8 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@civitai/theme": "^0.5.2",
-    "@civitai/components": "^0.9.3"
+    "@civitai/components": "^0.9.3",
+    "@civitai/theme": "^0.5.2"
   },
   "comment-peerDependencies": "This floor is DERIVED, not chosen — the lowest published app-sdk that exports every symbol this package imports. Do not edit it without reading ./PEER_FLOOR.md (in-repo, unpublished) and tests/guards/blocks-react-peer-floor.test.mjs.",
   "peerDependencies": {
@@ -58,7 +58,7 @@
     "typescript": "^5.9.2",
     "vite": "^8.0.14",
     "vitest": "^4.1.11",
-    "@civitai/app-sdk": "^0.65.1"
+    "@civitai/app-sdk": "^0.67.0"
   },
   "publishConfig": {
     "access": "public"