@civitai/blocks-react 0.71.0 → 0.72.0

package/dist/internal/liveHost.js

@@ -47,7 +47,7 @@
  * fetch chokepoints ..... 2
  * REST endpoints ........ GET /api/v1/blocks/me
  * tRPC procedures ....... 29 = blocks.* (14) + apps.shared.* (10) + apps.storage.* (5)
- * switch case labels .... 48, of which 10 REFUSE (enumerated under SCOPE below)
+ * switch case labels .... 49, of which 11 REFUSE (enumerated under SCOPE below)
  * --- END DERIVED ---
  *
  * PICKERS (Phase 1 of "make dev:live a faithful local host"): the live host
@@ -70,11 +70,12 @@
  * and row budgets enforced per (app, user) — with the REAL ceilings, so a
  * write this host accepts is one production would accept.
  *
- * SET_USER_CHECKPOINT (Phase 4): FORWARDED (faithful) to the block-token
- * `blocks.updateUserSettings` mutation — never fabricated. The default page
- * setup mints a PAGE token which lacks `ctx.modelId`, so the backend returns the
- * honest error "block token lacks modelId context"; that real outcome is
- * surfaced to the block. With a model-slot token it persists for real.
+ * SET_USER_CHECKPOINT (Phase 4): answered as the production host for the slot
+ * would. On a PAGE context (the default; dev-token mints page tokens) it is
+ * refused locally with the page host's own reply — `ok: false` and the same
+ * error text — and no backend call, because the page host makes none. On a
+ * model-slot context it is FORWARDED to the block-token
+ * `blocks.updateUserSettings` mutation, never fabricated.
  *
  * SHARED STORAGE (#386): the live host SERVES all TEN `SHARED_*` bridges —
  * `apps.shared.{list,get,getCount,getCounts,append,update,vote,unvote,withdraw,
@@ -113,6 +114,10 @@
  *   • RUN_TRAINING — the same dev-token refusal, plus the host-chrome consent
  *     dialog a run is confirmed in, which this harness does not have. Replies
  *     with a refusal.
+ *   • RUN_CONFIRMED_STEP — the server refuses a confirmed step from a dev token
+ *     and the estimate never returns a `stepQuote` for one, and the price is
+ *     confirmed in host chrome this harness does not have. Replies with a
+ *     refusal.
  *   • PUBLISH_GENERATION_OUTPUTS — publishing requires the viewer's signed-in
  *     civitai.com session, which the local harness does not have; test
  *     publishing against the mock host — `createMockHost` or `Harness` from
@@ -133,6 +138,7 @@
  * handled the refusal. Use dev:mock for those paths. See the handlers below.
  */
 import { consentUnavailablePayload, resolveUngrantableConsentNotice } from './consent.js';
+import { PAGE_CHECKPOINT_PERSIST_ERROR, PAGE_SLOT_ID, emulatesPageHost } from './hostSurface.js';
 import { hostContextWithTheme } from '../transport/transport.js';
 import { isRoutableRequestId } from '../transport/requestId.js';
 import { parseSharedStorageRateLimit } from '../transport/validate.js';
@@ -140,8 +146,6 @@ import { createTrackEventChecker } from './trackEventCheck.js';
 import { openPickerOverlay, } from './pickerOverlay.js';
 /** Default civitai backend the live host forwards to. */
 const DEFAULT_BACKEND_BASE_URL = 'https://civitai.com';
-/** Page slot id — dev-token mints page tokens (mirrors PAGE_SLOT_ID server-side). */
-const PAGE_SLOT_ID = 'app.page';
 /** The budgeted-spend scope the workflow procedures require. */
 const BUDGETED_SCOPE = 'ai:write:budgeted';
 /**
@@ -153,6 +157,10 @@ export const TRAINING_UNSUPPORTED_ERROR = 'training is not supported in dev:live
 const trainingUnsupportedLog = (type) => `${type} is not supported in dev:live (the server refuses every training request from a ` +
     'dev token, and a run needs the host-chrome consent dialog). Replying with a refusal. ' +
     'Use dev:mock to exercise the training flow.';
+/**
+ * The reply `RUN_CONFIRMED_STEP` gets in dev:live — see its handler.
+ */
+export const CONFIRMED_STEP_UNSUPPORTED_ERROR = 'confirmed steps are not supported in dev:live — use dev:mock';
 /**
  * Decode the middle (payload) segment of a JWT (base64url) WITHOUT verifying
  * the signature — client-side we only need the claims to build BLOCK_INIT; the
@@ -348,37 +356,33 @@ export function createLiveHost(options) {
     /**
      * The single tRPC transport primitive. Builds the non-batched httpLink +
      * superjson request for `procedure` and returns the PARSED envelope (or an
-     * error). `method` selects the tRPC verb:
-     *   - `'POST'` (mutation): body is `{ json: <input> }`.
-     *   - `'GET'` (query): input is querystring-encoded as
-     *     `?input=encodeURIComponent(JSON.stringify({ json: <input> }))`.
+     * error). Every call — query or mutation — is a POST to
+     * `/api/trpc/<procedure>` with body `{ json: <input> }` and no querystring.
+     * For a QUERY that is tRPC's query method override, which civitai.com's
+     * tRPC handler accepts (`allowMethodOverride: true`); the procedure is still
+     * a query on the server. Never GET: every procedure the live host calls
+     * takes the block token (a bearer credential) in its input, and a GET would
+     * put that input — token included — in the URL (`?input=…`).
      * Every call carries `Authorization: Bearer <rawToken>`. A thrown fetch →
      * `{ error, transient: true }`; a non-2xx → `{ error, transient }` (status-
      * classified via {@link isTransientHttpStatus}). Both `callTrpcMutation` and
      * `callTrpcData` build on this so the fetch/parse/error logic lives once.
      */
-    async function rawTrpcCall(procedure, input, method) {
+    async function rawTrpcCall(procedure, input) {
         if (!fetchImpl)
             return { error: 'no fetch available' };
         try {
-            let url = `${baseUrl}/api/trpc/${procedure}`;
+            const url = `${baseUrl}/api/trpc/${procedure}`;
             const init = {
-                method,
+                method: 'POST',
                 headers: {
                     'content-type': 'application/json',
                     authorization: `Bearer ${rawToken}`,
                 },
-            };
-            if (method === 'GET') {
-                // tRPC query: superjson input goes in the querystring.
-                const encoded = encodeURIComponent(JSON.stringify({ json: input }));
-                url = `${url}?input=${encoded}`;
-            }
-            else {
                 // Non-batched httpLink + superjson transformer wraps the input as
                 // `{ json: <input> }` (no `meta` for plain JSON inputs).
-                init.body = JSON.stringify({ json: input });
-            }
+                body: JSON.stringify({ json: input }),
+            };
             const res = await fetchImpl(url, init);
             const text = await res.text();
             let parsed;
@@ -412,7 +416,7 @@ export function createLiveHost(options) {
      * still {@link extractSnapshot}.
      */
     async function callTrpcMutation(procedure, input) {
-        const raw = await rawTrpcCall(procedure, input, 'POST');
+        const raw = await rawTrpcCall(procedure, input);
         if (raw.error !== undefined)
             return { error: raw.error, transient: raw.transient };
         const snapshot = extractSnapshot(raw.parsed);
@@ -423,12 +427,13 @@ export function createLiveHost(options) {
     }
     /**
      * Call a tRPC DATA procedure (storage / settings) and unwrap the plain data
-     * object it returns (via {@link extractData}). `method` is `'GET'` for queries
-     * (`apps.storage.{get,list,getQuota}`) and `'POST'` for mutations
-     * (`apps.storage.{set,delete}`, `blocks.updateUserSettings`).
+     * object it returns (via {@link extractData}). Queries
+     * (`apps.storage.{get,list,getQuota}`) and mutations
+     * (`apps.storage.{set,delete}`, `blocks.updateUserSettings`) alike — the
+     * wire form is the same POST (see {@link rawTrpcCall}).
      */
-    async function callTrpcData(procedure, input, method) {
-        const raw = await rawTrpcCall(procedure, input, method);
+    async function callTrpcData(procedure, input) {
+        const raw = await rawTrpcCall(procedure, input);
         if (raw.error !== undefined) {
             return {
                 error: raw.error,
@@ -449,11 +454,19 @@ export function createLiveHost(options) {
      * with {@link POLL_RETRY_BACKOFF_MS} backoff. The final result is only ever a
      * `snapshot` OR a still-transient error — the caller turns the latter into a
      * keep-polling `processing` reply, never a fabricated terminal `failed`.
+     *
+     * `waitSeconds` is the block's long-poll hint, passed through unchanged;
+     * `undefined` sends none, which keeps the request byte-identical to a plain
+     * read.
      */
-    async function pollWithRetry(workflowId) {
+    async function pollWithRetry(workflowId, waitSeconds) {
         let last = { error: 'poll failed', transient: true };
         for (let attempt = 0; attempt <= POLL_RETRY_BACKOFF_MS.length; attempt += 1) {
-            last = await callTrpcMutation('blocks.pollWorkflow', { blockToken: rawToken, workflowId });
+            last = await callTrpcMutation('blocks.pollWorkflow', {
+                blockToken: rawToken,
+                workflowId,
+                ...(waitSeconds !== undefined ? { waitSeconds } : {}),
+            });
             // A real snapshot (incl. a genuine terminal `failed`) — done.
             if (last.snapshot)
                 return last;
@@ -772,7 +785,7 @@ export function createLiveHost(options) {
                         // the server's own not-found error comes back here as `error`.
                         if (!isRoutableRequestId(requestId))
                             return;
-                        void callTrpcData('blocks.estimateWorkflowBatch', { blockToken: rawToken, bodies: typed.payload?.bodies }, 'POST').then((r) => {
+                        void callTrpcData('blocks.estimateWorkflowBatch', { blockToken: rawToken, bodies: typed.payload?.bodies }).then((r) => {
                             const data = r.data;
                             dispatchToBlock({
                                 type: 'ESTIMATE_BATCH_RESULT',
@@ -802,7 +815,23 @@ export function createLiveHost(options) {
                         // transfer, and inventing one is a behaviour change on a path where
                         // `dev:live` spends REAL Buzz. Threading it through is tracked
                         // separately rather than bolted on here.
-                        void callTrpcMutation('blocks.submitWorkflow', { blockToken: rawToken, body }).then((r) => {
+                        //
+                        // 🔴 THE IDEMPOTENCY KEY IS FORWARDED, as both production hosts do:
+                        // only when it is a non-empty string, otherwise the field is left
+                        // off. It was dropped here, so in `dev:live` — which spends REAL
+                        // Buzz — a retry carrying the same key was a second submit rather
+                        // than a deduplicated one, and a key in a format the server refuses
+                        // was never refused. The server validates the format; its refusal
+                        // comes back as the failed snapshot below.
+                        const rawIdempotencyKey = typed.payload?.idempotencyKey;
+                        const idempotencyKey = typeof rawIdempotencyKey === 'string' && rawIdempotencyKey.length > 0
+                            ? rawIdempotencyKey
+                            : undefined;
+                        void callTrpcMutation('blocks.submitWorkflow', {
+                            blockToken: rawToken,
+                            body,
+                            ...(idempotencyKey !== undefined ? { idempotencyKey } : {}),
+                        }).then((r) => {
                             dispatchToBlock({
                                 type: 'WORKFLOW_SUBMITTED',
                                 payload: {
@@ -815,7 +844,16 @@ export function createLiveHost(options) {
                     }
                     case 'POLL_WORKFLOW': {
                         const workflowId = typed.payload?.workflowId ?? '';
-                        void pollWithRetry(workflowId).then((r) => {
+                        // The long-poll hint is forwarded (it was dropped here, so
+                        // `watch()` could never hold a poll open in `dev:live`), with the
+                        // production hosts' rule as of civitai/civitai#5798: a finite
+                        // number is sent UNCHANGED, anything else sends no field. The
+                        // server owns every bound (floor, `<= 0` is no hold, the cap).
+                        const rawWaitSeconds = typed.payload?.waitSeconds;
+                        const waitSeconds = typeof rawWaitSeconds === 'number' && Number.isFinite(rawWaitSeconds)
+                            ? rawWaitSeconds
+                            : undefined;
+                        void pollWithRetry(workflowId, waitSeconds).then((r) => {
                             // Snapshot present (incl. a genuine terminal `failed` from the
                             // backend) — forward it as-is.
                             if (r.snapshot) {
@@ -899,7 +937,7 @@ export function createLiveHost(options) {
                         // so a reply without one is unroutable.
                         if (!isRoutableRequestId(requestId))
                             return;
-                        void callTrpcData('blocks.getMyBuzzBalance', { blockToken: rawToken }, 'POST').then((r) => {
+                        void callTrpcData('blocks.getMyBuzzBalance', { blockToken: rawToken }).then((r) => {
                             dispatchToBlock({
                                 type: 'BUZZ_BALANCE_RESULT',
                                 payload: r.data
@@ -920,7 +958,7 @@ export function createLiveHost(options) {
                         // without one is unroutable.
                         if (!isRoutableRequestId(requestId))
                             return;
-                        void callTrpcData('blocks.getMyViewer', { blockToken: rawToken }, 'POST').then((r) => {
+                        void callTrpcData('blocks.getMyViewer', { blockToken: rawToken }).then((r) => {
                             dispatchToBlock({
                                 type: 'VIEWER_RESULT',
                                 payload: r.data
@@ -937,7 +975,7 @@ export function createLiveHost(options) {
                         // real host. FREE-TEXT error on failure. Unroutable without requestId.
                         if (!isRoutableRequestId(requestId))
                             return;
-                        void callTrpcData('blocks.getMyBuzzTransactions', { ...(typed.payload?.params ?? {}), blockToken: rawToken }, 'POST').then((r) => {
+                        void callTrpcData('blocks.getMyBuzzTransactions', { ...(typed.payload?.params ?? {}), blockToken: rawToken }).then((r) => {
                             dispatchToBlock({
                                 type: 'BUZZ_TRANSACTIONS_RESULT',
                                 payload: r.data
@@ -950,7 +988,7 @@ export function createLiveHost(options) {
                     case 'GET_BUZZ_ACCOUNTS': {
                         if (!isRoutableRequestId(requestId))
                             return;
-                        void callTrpcData('blocks.getMyBuzzAccounts', { blockToken: rawToken }, 'POST').then((r) => {
+                        void callTrpcData('blocks.getMyBuzzAccounts', { blockToken: rawToken }).then((r) => {
                             dispatchToBlock({
                                 type: 'BUZZ_ACCOUNTS_RESULT',
                                 payload: r.data
@@ -963,7 +1001,7 @@ export function createLiveHost(options) {
                     case 'GET_DAILY_COMPENSATION': {
                         if (!isRoutableRequestId(requestId))
                             return;
-                        void callTrpcData('blocks.getMyDailyCompensation', { ...(typed.payload?.params ?? {}), blockToken: rawToken }, 'POST').then((r) => {
+                        void callTrpcData('blocks.getMyDailyCompensation', { ...(typed.payload?.params ?? {}), blockToken: rawToken }).then((r) => {
                             dispatchToBlock({
                                 type: 'DAILY_COMPENSATION_RESULT',
                                 payload: r.data
@@ -1080,6 +1118,30 @@ export function createLiveHost(options) {
                         });
                         return;
                     }
+                    case 'RUN_CONFIRMED_STEP': {
+                        // UNSUPPORTED in live, and the SERVER decides it, exactly as for the
+                        // training bridges above: a confirmed step is refused for a dev token
+                        // ("a confirmed step is not available from a development or review
+                        // session" — `quotedGrantTokenGate` in civitai/civitai), so a forwarded
+                        // ESTIMATE never carries a `stepQuote` here and a block has no real
+                        // `quoteId` to send. The price is also confirmed in host chrome this
+                        // harness does not have, and the job is CHARGED — faking either half
+                        // would let dev prove out a flow production does not have.
+                        //
+                        // Use dev:mock: an over-budget `generation.costPerGen` makes its
+                        // estimate quote one, and `runConfirmedStepError` covers `declined`,
+                        // `daily-limit-exceeded` and `submission-unconfirmed`.
+                        if (!isRoutableRequestId(requestId))
+                            return;
+                        logOnce('confirmed-step', 'RUN_CONFIRMED_STEP is not supported in dev:live (the server refuses a confirmed ' +
+                            'step from a dev token, and the price is confirmed in host chrome). Replying ' +
+                            'with a refusal. Use dev:mock to exercise the confirmed-step flow.');
+                        dispatchToBlock({
+                            type: 'CONFIRMED_STEP_RESULT',
+                            payload: { requestId, error: CONFIRMED_STEP_UNSUPPORTED_ERROR },
+                        });
+                        return;
+                    }
                     case 'GET_WILDCARD_PACK': {
                         // UNSUPPORTED in live v1 (honest-by-design, like OPEN_BUZZ_PURCHASE):
                         // the real host resolves the pack via a SESSION-authed proc and does
@@ -1110,7 +1172,7 @@ export function createLiveHost(options) {
                         // FREE-TEXT error on failure. Unroutable without requestId.
                         if (!isRoutableRequestId(requestId))
                             return;
-                        void callTrpcData('blocks.queryAppWorkflows', { ...(typed.payload?.params ?? {}), blockToken: rawToken }, 'POST').then((r) => {
+                        void callTrpcData('blocks.queryAppWorkflows', { ...(typed.payload?.params ?? {}), blockToken: rawToken }).then((r) => {
                             dispatchToBlock({
                                 type: 'APP_WORKFLOWS_RESULT',
                                 payload: r.data
@@ -1132,7 +1194,7 @@ export function createLiveHost(options) {
                         const cancelId = typed.payload?.workflowId;
                         if (typeof cancelId !== 'string' || cancelId.length === 0)
                             return;
-                        void callTrpcData('blocks.cancelAppWorkflow', { blockToken: rawToken, workflowId: cancelId }, 'POST').then((r) => {
+                        void callTrpcData('blocks.cancelAppWorkflow', { blockToken: rawToken, workflowId: cancelId }).then((r) => {
                             dispatchToBlock({
                                 type: 'CANCEL_APP_WORKFLOW_RESULT',
                                 payload: r.data
@@ -1185,7 +1247,7 @@ export function createLiveHost(options) {
                         // FREE-TEXT error on failure. Unroutable without requestId.
                         if (!isRoutableRequestId(requestId))
                             return;
-                        void callTrpcData('blocks.getImagesByIds', { blockToken: rawToken, imageIds: typed.payload?.imageIds ?? [] }, 'POST').then((r) => {
+                        void callTrpcData('blocks.getImagesByIds', { blockToken: rawToken, imageIds: typed.payload?.imageIds ?? [] }).then((r) => {
                             dispatchToBlock({
                                 type: 'IMAGES_RESULT',
                                 payload: r.data
@@ -1282,13 +1344,27 @@ export function createLiveHost(options) {
                         return;
                     }
                     case 'SET_USER_CHECKPOINT': {
-                        // FORWARD (faithful) to blocks.updateUserSettings — never fabricate.
-                        // Mirror the prod IframeHost's versionId validation: a number or an
-                        // explicit null is valid; anything else is rejected WITHOUT a backend
-                        // call. NOTE: dev-token mints PAGE tokens which lack `ctx.modelId`, so
-                        // with the default page setup the backend returns the honest error
-                        // "block token lacks modelId context" — this is FAITHFUL (it surfaces
-                        // the real outcome) and works for real with a model-slot token.
+                        // 🔴 A PAGE REFUSES, ALWAYS, WITHOUT A BACKEND CALL — and the default
+                        // context is a page. That is the production page host exactly: the
+                        // same reply type, shape and error text, whatever `versionId` was
+                        // sent, and nothing dropped except a request with no id to answer.
+                        // This used to forward to `blocks.updateUserSettings`, a call the
+                        // page host never makes, so the block saw the server's wording where
+                        // production sends its own refusal. See ./hostSurface.ts.
+                        if (emulatesPageHost(options.context)) {
+                            if (!isRoutableRequestId(requestId))
+                                return;
+                            dispatchToBlock({
+                                type: 'USER_CHECKPOINT_SET',
+                                payload: { requestId, ok: false, error: PAGE_CHECKPOINT_PERSIST_ERROR },
+                            });
+                            return;
+                        }
+                        // MODEL SLOT: FORWARD (faithful) to blocks.updateUserSettings — never
+                        // fabricate. Mirror the prod IframeHost's versionId validation: a
+                        // number or an explicit null is valid; anything else is rejected
+                        // WITHOUT a backend call. A token without `ctx.modelId` gets the
+                        // server's honest "block token lacks modelId context".
                         const rawVersionId = typed.payload?.versionId;
                         const versionId = rawVersionId === null
                             ? null
@@ -1306,7 +1382,7 @@ export function createLiveHost(options) {
                             });
                             return;
                         }
-                        void callTrpcData('blocks.updateUserSettings', { blockToken: rawToken, settings: { checkpoint_version_id: versionId } }, 'POST').then((r) => {
+                        void callTrpcData('blocks.updateUserSettings', { blockToken: rawToken, settings: { checkpoint_version_id: versionId } }).then((r) => {
                             dispatchToBlock({
                                 type: 'USER_CHECKPOINT_SET',
                                 payload: r.error
@@ -1317,11 +1393,11 @@ export function createLiveHost(options) {
                         return;
                     }
                     case 'APP_STORAGE_GET': {
-                        // Query apps.storage.get {blockToken, key} (GET). The server enforces
+                        // Query apps.storage.get {blockToken, key} (sent as POST). The server enforces
                         // the apps:storage:read scope; the dev token carries it iff the local
                         // manifest declared it.
                         const key = typed.payload?.key ?? '';
-                        void callTrpcData('apps.storage.get', { blockToken: rawToken, key }, 'GET').then((r) => {
+                        void callTrpcData('apps.storage.get', { blockToken: rawToken, key }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'APP_STORAGE_GET_RESULT',
@@ -1344,7 +1420,7 @@ export function createLiveHost(options) {
                         // keep in sync.
                         const key = typed.payload?.key ?? '';
                         const value = typed.payload?.value;
-                        void callTrpcData('apps.storage.set', { blockToken: rawToken, key, value }, 'POST').then((r) => {
+                        void callTrpcData('apps.storage.set', { blockToken: rawToken, key, value }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'APP_STORAGE_SET_RESULT',
@@ -1367,7 +1443,7 @@ export function createLiveHost(options) {
                     case 'APP_STORAGE_DELETE': {
                         // Mutation apps.storage.delete {blockToken, key} (POST).
                         const key = typed.payload?.key ?? '';
-                        void callTrpcData('apps.storage.delete', { blockToken: rawToken, key }, 'POST').then((r) => {
+                        void callTrpcData('apps.storage.delete', { blockToken: rawToken, key }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'APP_STORAGE_DELETE_RESULT',
@@ -1392,7 +1468,7 @@ export function createLiveHost(options) {
                         return;
                     }
                     case 'APP_STORAGE_LIST': {
-                        // Query apps.storage.list {blockToken, prefix?, limit, cursor?} (GET).
+                        // Query apps.storage.list {blockToken, prefix?, limit, cursor?} (sent as POST).
                         // Clamp the limit to the server's [1,200] bound (default 50); only
                         // include prefix/cursor when they're strings so JSON.stringify drops
                         // the undefined keys (the server input is `.optional()`).
@@ -1407,7 +1483,7 @@ export function createLiveHost(options) {
                             listInput.prefix = prefix;
                         if (typeof cursor === 'string')
                             listInput.cursor = cursor;
-                        void callTrpcData('apps.storage.list', listInput, 'GET').then((r) => {
+                        void callTrpcData('apps.storage.list', listInput).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'APP_STORAGE_LIST_RESULT',
@@ -1440,8 +1516,8 @@ export function createLiveHost(options) {
                         return;
                     }
                     case 'APP_STORAGE_QUOTA': {
-                        // Query apps.storage.getQuota {blockToken} (GET).
-                        void callTrpcData('apps.storage.getQuota', { blockToken: rawToken }, 'GET').then((r) => {
+                        // Query apps.storage.getQuota {blockToken} (sent as POST).
+                        void callTrpcData('apps.storage.getQuota', { blockToken: rawToken }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'APP_STORAGE_QUOTA_RESULT',
@@ -1490,7 +1566,7 @@ export function createLiveHost(options) {
                             listInput.prefix = typed.payload.prefix;
                         if (typeof typed.payload?.cursor === 'string')
                             listInput.cursor = typed.payload.cursor;
-                        void callTrpcData('apps.shared.list', listInput, 'GET').then((r) => {
+                        void callTrpcData('apps.shared.list', listInput).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'SHARED_LIST_RESULT',
@@ -1516,7 +1592,7 @@ export function createLiveHost(options) {
                     }
                     case 'SHARED_GET_COUNT': {
                         const key = typed.payload?.key ?? '';
-                        void callTrpcData('apps.shared.getCount', { blockToken: rawToken, key }, 'GET').then((r) => {
+                        void callTrpcData('apps.shared.getCount', { blockToken: rawToken, key }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'SHARED_GET_COUNT_RESULT',
@@ -1534,7 +1610,7 @@ export function createLiveHost(options) {
                     }
                     case 'SHARED_GET_COUNTS': {
                         const keys = Array.isArray(typed.payload?.keys) ? typed.payload.keys : [];
-                        void callTrpcData('apps.shared.getCounts', { blockToken: rawToken, keys }, 'GET').then((r) => {
+                        void callTrpcData('apps.shared.getCounts', { blockToken: rawToken, keys }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'SHARED_GET_COUNTS_RESULT',
@@ -1571,7 +1647,7 @@ export function createLiveHost(options) {
                         // so a `?g=` deep-link to a moderated row cannot distinguish it
                         // from an absent one. Only a HOST-SIDE failure sets `error`.
                         const key = typed.payload?.key ?? '';
-                        void callTrpcData('apps.shared.get', { blockToken: rawToken, key }, 'GET').then((r) => {
+                        void callTrpcData('apps.shared.get', { blockToken: rawToken, key }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'SHARED_GET_RESULT',
@@ -1605,7 +1681,7 @@ export function createLiveHost(options) {
                     }
                     case 'SHARED_APPEND': {
                         const value = typed.payload?.value;
-                        void callTrpcData('apps.shared.append', { blockToken: rawToken, value }, 'POST').then((r) => {
+                        void callTrpcData('apps.shared.append', { blockToken: rawToken, value }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'SHARED_APPEND_RESULT',
@@ -1624,7 +1700,7 @@ export function createLiveHost(options) {
                     case 'SHARED_UPDATE': {
                         const key = typed.payload?.key ?? '';
                         const value = typed.payload?.value;
-                        void callTrpcData('apps.shared.update', { blockToken: rawToken, key, value }, 'POST').then((r) => {
+                        void callTrpcData('apps.shared.update', { blockToken: rawToken, key, value }).then((r) => {
                             dispatchToBlock({
                                 type: 'SHARED_UPDATE_RESULT',
                                 payload: r.error
@@ -1636,7 +1712,7 @@ export function createLiveHost(options) {
                     }
                     case 'SHARED_VOTE': {
                         const key = typed.payload?.key ?? '';
-                        void callTrpcData('apps.shared.vote', { blockToken: rawToken, key }, 'POST').then((r) => {
+                        void callTrpcData('apps.shared.vote', { blockToken: rawToken, key }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'SHARED_VOTE_RESULT',
@@ -1654,7 +1730,7 @@ export function createLiveHost(options) {
                     }
                     case 'SHARED_UNVOTE': {
                         const key = typed.payload?.key ?? '';
-                        void callTrpcData('apps.shared.unvote', { blockToken: rawToken, key }, 'POST').then((r) => {
+                        void callTrpcData('apps.shared.unvote', { blockToken: rawToken, key }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'SHARED_UNVOTE_RESULT',
@@ -1672,7 +1748,7 @@ export function createLiveHost(options) {
                     }
                     case 'SHARED_WITHDRAW': {
                         const key = typed.payload?.key ?? '';
-                        void callTrpcData('apps.shared.withdraw', { blockToken: rawToken, key }, 'POST').then((r) => {
+                        void callTrpcData('apps.shared.withdraw', { blockToken: rawToken, key }).then((r) => {
                             if (r.error) {
                                 dispatchToBlock({
                                     type: 'SHARED_WITHDRAW_RESULT',
@@ -1714,7 +1790,7 @@ export function createLiveHost(options) {
                         if (typeof typed.payload?.reason === 'string') {
                             reportInput.reason = typed.payload.reason;
                         }
-                        void callTrpcData('apps.shared.report', reportInput, 'POST').then((r) => {
+                        void callTrpcData('apps.shared.report', reportInput).then((r) => {
                             dispatchToBlock({
                                 type: 'SHARED_REPORT_RESULT',
                                 payload: r.error
@@ -1968,6 +2044,12 @@ export function createLiveHost(options) {
                         // failed viewer fetch already warns in resolveViewer).
                         return;
                     default:
+                        // No reply, as in production. `livehost-message-coverage.test.mjs`
+                        // holds every protocol type with a reply channel to a `case` above,
+                        // so what reaches here is BLOCK_HELLO, BLOCK_MESSAGE_REJECTED or a
+                        // type this protocol does not declare. The real host's `unsupported
+                        // on this host` reply is built only for a request type it KNOWS and
+                        // has no handler for; a type it does not know gets nothing.
                         return;
                 }
             },