@civitai/blocks-react 0.71.0 → 0.72.2

package/dist/hooks/useBuzzTransactions.js

@@ -2,6 +2,7 @@ import { useCallback, useEffect, useState } from 'react';
 import { getTransport } from '../transport/singleton.js';
 import { sendTypedRequest } from '../transport/transport.js';
 import { useRequestSequencer } from './useRequestSequencer.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /** Rehydrate the host's `date`/`cursor` (a `Date` instance OR an ISO string). */
 function toDate(v) {
     return v instanceof Date ? v : new Date(v);
@@ -31,6 +32,7 @@ function toIso(v) {
  * const { transactions, cursor, loading, error } = useBuzzTransactions({ type: 'Tip', limit: 20 });
  */
 export function useBuzzTransactions(params) {
+    useTransportConnection();
     const [transactions, setTransactions] = useState(null);
     const [cursor, setCursor] = useState(null);
     const [loading, setLoading] = useState(true);

package/dist/hooks/useBuzzWorkflow.d.ts

@@ -13,6 +13,22 @@ import type { ConsentRetryOptions } from './consentRetryOptions.js';
  * on that class is money-ambiguous by design).
  */
 export declare const TRAINING_BODY_SUBMIT_REFUSAL = "useBuzzWorkflow.submit() does not run a kind:'training' body \u2014 estimate it here, then run it with useRunTraining().runTraining({ ...body, quoteId }). Nothing was sent.";
+/**
+ * Why {@link UseBuzzWorkflow.submit} refuses a pass-through `step` body that
+ * carries a `quoteId`.
+ *
+ * 🔴 REFUSED BEFORE THE SEND, for the same reason as
+ * {@link TRAINING_BODY_SUBMIT_REFUSAL}. A `quoteId` on a pass-through body means
+ * "charge this job against the price the viewer confirmed", and only
+ * `RUN_CONFIRMED_STEP`'s host-chrome dialog can record that confirmation — so a
+ * `SUBMIT_WORKFLOW` carrying one can never start the job; the server refuses it
+ * as unconfirmed. Nothing is sent and nothing is spent, which is why this too is
+ * a plain `Error` and not a {@link WorkflowSubmitError}.
+ *
+ * The same body WITHOUT `quoteId` is an ordinary pass-through submit and is not
+ * affected.
+ */
+export declare const CONFIRMED_STEP_BODY_SUBMIT_REFUSAL = "useBuzzWorkflow.submit() does not run a step body that carries a quoteId \u2014 run it with useRunConfirmedStep().runConfirmedStep(body), or drop quoteId to submit it as an ordinary job. Nothing was sent.";
 /**
  * Default orchestrator-side hold per {@link UseBuzzWorkflow.watch} poll,
  * in SECONDS.
@@ -486,6 +502,17 @@ export interface UseBuzzWorkflow {
      * A `kind: 'training'` body's reply also carries
      * {@link BlockWorkflowSnapshot.trainingQuote} — the `quoteId` to run it with
      * through `useRunTraining()`.
+     *
+     * A pass-through `step` body's reply carries
+     * {@link BlockWorkflowSnapshot.stepQuote} when its FIXED price is above the
+     * token's per-call budget (and within the per-job ceiling). That job cannot
+     * run through {@link UseBuzzWorkflow.submit}; run it with
+     * `useRunConfirmedStep().runConfirmedStep({ ...body, quoteId:
+     * stepQuote.quoteId })`, which has the viewer confirm `stepQuote.total`. No
+     * `stepQuote` means the ordinary rules apply — it is also what a host without
+     * the feature sends. Where a quote would be granted, this REJECTS instead for
+     * a training `$type` or an `input` that is not plain JSON (see
+     * {@link BlockWorkflowSnapshot.stepQuote} for the two messages).
      */
     estimate: (body: WorkflowBody) => Promise<BlockWorkflowSnapshot>;
     /**
@@ -589,6 +616,9 @@ export interface UseBuzzWorkflow {
      *
      * 🔴 A `kind: 'training'` BODY IS REFUSED before anything is sent — it runs
      * only through `useRunTraining()`. See {@link TRAINING_BODY_SUBMIT_REFUSAL}.
+     * So is a pass-through `step` body that carries a `quoteId` — it runs only
+     * through `useRunConfirmedStep()`. See
+     * {@link CONFIRMED_STEP_BODY_SUBMIT_REFUSAL}.
      */
     submit: (body: WorkflowBody, options?: SubmitWorkflowOptions) => Promise<BlockWorkflowSnapshot>;
     /**
@@ -703,9 +733,11 @@ export interface UseBuzzWorkflow {
  * orchestrator steps as one workflow through these same calls, and:
  *  - `estimate()`'s `cost.total` is NOT a maximum: the orchestrator re-prices a
  *    step once the values it references are known and charges the difference;
- *  - a workflow the host cannot price still proceeds on `submit()`, reserved at
- *    the app's per-generation budget × the number of steps (one with a training
- *    step, or with a `repeat` step at any depth, is refused instead);
+ *  - a workflow the host cannot price FAILS `estimate()` with a
+ *    `workflow_quote_*` `errorCode` and no `cost`, yet still proceeds on
+ *    `submit()`, reserved at the app's per-generation budget × the number of
+ *    steps (one with a training step, or with a `repeat` step at any depth, is
+ *    refused on both); an older host returns that ceiling as the estimate;
  *  - one author fee applies to the whole workflow, not one per step, and it is
  *    reversed whole if the workflow does not succeed;
  *  - `repeat` iterates only an array in the body's `arguments`, at most 16

package/dist/hooks/useBuzzWorkflow.js

@@ -4,6 +4,7 @@ import { withConsentRetry } from '../internal/withConsentRetry.js';
 import { WORKFLOW_REQUEST_TIMEOUT_MS } from '../transport/requestTimeouts.js';
 import { getTransport } from '../transport/singleton.js';
 import { resolveIdempotencyKey, sendTypedRequest } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * The consent-gated scope {@link UseBuzzWorkflow.submit} requires.
  *
@@ -30,6 +31,22 @@ const WORKFLOW_SCOPES = [BLOCK_SCOPES.AI_WRITE_BUDGETED];
  * on that class is money-ambiguous by design).
  */
 export const TRAINING_BODY_SUBMIT_REFUSAL = "useBuzzWorkflow.submit() does not run a kind:'training' body — estimate it here, then run it with useRunTraining().runTraining({ ...body, quoteId }). Nothing was sent.";
+/**
+ * Why {@link UseBuzzWorkflow.submit} refuses a pass-through `step` body that
+ * carries a `quoteId`.
+ *
+ * 🔴 REFUSED BEFORE THE SEND, for the same reason as
+ * {@link TRAINING_BODY_SUBMIT_REFUSAL}. A `quoteId` on a pass-through body means
+ * "charge this job against the price the viewer confirmed", and only
+ * `RUN_CONFIRMED_STEP`'s host-chrome dialog can record that confirmation — so a
+ * `SUBMIT_WORKFLOW` carrying one can never start the job; the server refuses it
+ * as unconfirmed. Nothing is sent and nothing is spent, which is why this too is
+ * a plain `Error` and not a {@link WorkflowSubmitError}.
+ *
+ * The same body WITHOUT `quoteId` is an ordinary pass-through submit and is not
+ * affected.
+ */
+export const CONFIRMED_STEP_BODY_SUBMIT_REFUSAL = "useBuzzWorkflow.submit() does not run a step body that carries a quoteId — run it with useRunConfirmedStep().runConfirmedStep(body), or drop quoteId to submit it as an ordinary job. Nothing was sent.";
 /**
  * Snapshot statuses that mean "no further polling is needed."
  * Used by both `submit` (a host can return an instant-fail / cached result)
@@ -528,9 +545,11 @@ export class WorkflowSubmitError extends Error {
  * orchestrator steps as one workflow through these same calls, and:
  *  - `estimate()`'s `cost.total` is NOT a maximum: the orchestrator re-prices a
  *    step once the values it references are known and charges the difference;
- *  - a workflow the host cannot price still proceeds on `submit()`, reserved at
- *    the app's per-generation budget × the number of steps (one with a training
- *    step, or with a `repeat` step at any depth, is refused instead);
+ *  - a workflow the host cannot price FAILS `estimate()` with a
+ *    `workflow_quote_*` `errorCode` and no `cost`, yet still proceeds on
+ *    `submit()`, reserved at the app's per-generation budget × the number of
+ *    steps (one with a training step, or with a `repeat` step at any depth, is
+ *    refused on both); an older host returns that ceiling as the estimate;
  *  - one author fee applies to the whole workflow, not one per step, and it is
  *    reversed whole if the workflow does not succeed;
  *  - `repeat` iterates only an array in the body's `arguments`, at most 16
@@ -604,6 +623,7 @@ export class WorkflowSubmitError extends Error {
  * }
  */
 export function useBuzzWorkflow() {
+    useTransportConnection();
     const [status, setStatus] = useState('idle');
     const [result, setResult] = useState(null);
     const [error, setError] = useState(null);
@@ -765,6 +785,15 @@ export function useBuzzWorkflow() {
             setStatus('error');
             throw refused;
         }
+        // See `CONFIRMED_STEP_BODY_SUBMIT_REFUSAL`. Keyed on the PRESENCE of a
+        // `quoteId`, whatever its shape: a malformed one is no more submittable
+        // than a well-formed one, and the server would refuse both.
+        if (body.kind === 'step' && body.quoteId !== undefined) {
+            const refused = new Error(CONFIRMED_STEP_BODY_SUBMIT_REFUSAL);
+            setError(refused);
+            setStatus('error');
+            throw refused;
+        }
         setError(null);
         setStatus('submitting');
         // Idempotency: reuse a caller-supplied stable key across a retry (→ one Buzz

package/dist/hooks/useCheckpointPicker.d.ts

@@ -54,6 +54,8 @@ export interface UseCheckpointPicker {
  * host. Pass `null` to clear the override and fall back to the publisher
  * default at next mount. Throws on host-side validation failure (e.g.
  * "wrong-ecosystem") — surface the message to the user; don't retry blindly.
+ * MODEL SLOTS ONLY: on a page (`app.page`) the host refuses every `persist`,
+ * so it always throws there; a page app keeps the pick in its own state.
  *
  * Both flows are host-mediated: the block never touches the picker UI or
  * the user-settings table directly. Same trust model as useBuzzPurchase /

package/dist/hooks/useCheckpointPicker.js

@@ -3,6 +3,7 @@ import { HUMAN_INTERACTION_TIMEOUT_MS } from '../transport/requestTimeouts.js';
 import { throwOnFailedReply } from '../internal/replyError.js';
 import { getTransport } from '../transport/singleton.js';
 import { sendTypedRequest } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Drives the platform-side Checkpoint picker and the persist-override flow.
  *
@@ -15,6 +16,8 @@ import { sendTypedRequest } from '../transport/transport.js';
  * host. Pass `null` to clear the override and fall back to the publisher
  * default at next mount. Throws on host-side validation failure (e.g.
  * "wrong-ecosystem") — surface the message to the user; don't retry blindly.
+ * MODEL SLOTS ONLY: on a page (`app.page`) the host refuses every `persist`,
+ * so it always throws there; a page app keeps the pick in its own state.
  *
  * Both flows are host-mediated: the block never touches the picker UI or
  * the user-settings table directly. Same trust model as useBuzzPurchase /
@@ -32,6 +35,7 @@ import { sendTypedRequest } from '../transport/transport.js';
  * const { selected } = await open({ baseModelGroup: checkpoint.baseModel });
  */
 export function useCheckpointPicker() {
+    useTransportConnection();
     const open = useCallback(async (opts) => {
         // Both keys are spread conditionally, and an empty or whitespace-only
         // family is normalized to absent.

package/dist/hooks/useCivitaiNavigate.js

@@ -1,5 +1,6 @@
 import { useCallback } from 'react';
 import { getTransport } from '../transport/singleton.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Requests a navigation from the host: the hook sends a `NAVIGATE` message and
  * returns. Fire-and-forget — the host doesn't reply, so the block never learns
@@ -38,6 +39,7 @@ import { getTransport } from '../transport/singleton.js';
  * navigate('detail/7', 'new_tab');                       // the pre-`scope` shape, still app-scoped
  */
 export function useCivitaiNavigate() {
+    useTransportConnection();
     const navigate = useCallback((path, options = {}) => {
         // A bare string is the pre-`scope` call shape (`navigate(path, 'new_tab')`)
         // and stays supported: there are live callers, and the whole point of the

package/dist/hooks/useCivitaiRoute.js

@@ -1,4 +1,5 @@
 import { useTransportSnapshot } from './useBlockContext.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * The sub-path below your app's root that is CURRENTLY showing, kept live for
  * the whole life of the block ON THE IFRAME TRANSPORT.
@@ -56,6 +57,7 @@ import { useTransportSnapshot } from './useBlockContext.js';
  * moves and nothing renders.
  */
 export function useCivitaiRoute() {
+    useTransportConnection();
     const context = useTransportSnapshot().context;
     // A PRESENCE test, not a slot-id test, and not a cast. `BlockContext` is a
     // union whose `UnknownSlotContext` arm declares `slotId` and nothing else, and

package/dist/hooks/useCollectionFollow.js

@@ -2,6 +2,7 @@ import { useCallback, useEffect, useRef, useState } from 'react';
 import { HUMAN_INTERACTION_TIMEOUT_MS } from '../transport/requestTimeouts.js';
 import { getTransport } from '../transport/singleton.js';
 import { RequestTimeoutError, sendTypedRequest } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * The closed set of HOST refusal codes, as a runtime Set.
  *
@@ -134,6 +135,7 @@ export class CollectionFollowError extends Error {
  * };
  */
 export function useCollectionFollow() {
+    useTransportConnection();
     const [pending, setPending] = useState(false);
     const [error, setError] = useState(null);
     // Same guard as `useTip`/`useWildcardPack`: this request can outlive the

package/dist/hooks/useConsentUnavailable.js

@@ -2,6 +2,7 @@ import { useCallback, useEffect, useState } from 'react';
 import { armConsentRefusalLatch, clearConsentRefusalLatch, readConsentRefusalLatch, } from '../internal/consentRefusalLatch.js';
 import { getTransport } from '../transport/singleton.js';
 import { subscribeTyped } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Subscribe to the host's `CONSENT_UNAVAILABLE` push — the signal that a
  * `REQUEST_CONSENT` this block sent can **never** be granted in this
@@ -62,6 +63,7 @@ import { subscribeTyped } from '../transport/transport.js';
  * return <button onClick={() => requestConsent({ scopes: ['ai:write:budgeted'] })}>Generate</button>;
  */
 export function useConsentUnavailable() {
+    useTransportConnection();
     const [refusal, setRefusal] = useState(null);
     useEffect(() => {
         const transport = getTransport();

package/dist/hooks/useCreatePostFromApp.js

@@ -4,6 +4,7 @@ import { withConsentRetry } from '../internal/withConsentRetry.js';
 import { HUMAN_INTERACTION_TIMEOUT_MS } from '../transport/requestTimeouts.js';
 import { getTransport } from '../transport/singleton.js';
 import { RequestTimeoutError, sendTypedRequest } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * The consent-gated scope this bridge requires — `posts:write:self`, named in
  * `@civitai/app-sdk`'s own `CREATE_POST_FROM_APP` message docs ("Scope
@@ -156,6 +157,7 @@ export class CreatePostError extends Error {
  * };
  */
 export function useCreatePostFromApp() {
+    useTransportConnection();
     const [pending, setPending] = useState(false);
     const [error, setError] = useState(null);
     // Same guard as `useCollectionFollow`: this request can outlive the component

package/dist/hooks/useDailyCompensation.js

@@ -2,6 +2,7 @@ import { useCallback, useEffect, useState } from 'react';
 import { getTransport } from '../transport/singleton.js';
 import { sendTypedRequest } from '../transport/transport.js';
 import { useRequestSequencer } from './useRequestSequencer.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Read the signed-in viewer's per-modelVersion generation compensation for the
  * MONTH containing `params.date`, through the host-mediated
@@ -19,6 +20,7 @@ import { useRequestSequencer } from './useRequestSequencer.js';
  * const { resources, hasPublishedResources } = useDailyCompensation({ date: '2026-07-01' });
  */
 export function useDailyCompensation(params) {
+    useTransportConnection();
     const [resources, setResources] = useState(null);
     const [hasPublishedResources, setHasPublishedResources] = useState(null);
     const [loading, setLoading] = useState(true);

package/dist/hooks/useDirectLoad.js

@@ -1,6 +1,7 @@
 import { useEffect, useState } from 'react';
 import { DIRECT_LOAD_TIMEOUT_MS } from '../transport/directLoad.js';
 import { useTransportSnapshot } from './useBlockContext.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * True iff the current window is the TOP-LEVEL browsing context — i.e. the
  * block is NOT running inside an iframe.
@@ -47,6 +48,7 @@ function isTopLevel() {
  * `ready` is `true`, so a late init can't leave a stuck fallback.
  */
 export function useDirectLoad(options) {
+    useTransportConnection();
     const timeoutMs = options?.timeoutMs ?? DIRECT_LOAD_TIMEOUT_MS;
     const ready = useTransportSnapshot().ready;
     // Sampled once per mount — top-level-ness doesn't change during a page's life.

package/dist/hooks/useDomainMaturity.js

@@ -1,5 +1,6 @@
 import { effectiveBrowsingCeiling, isSfwCeiling, isLevelAllowed as isLevelAllowedCeiling, } from '@civitai/app-sdk/blocks';
 import { useTransportSnapshot } from './useBlockContext.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Read the maturity ceiling in force for the current viewer, as the host
  * projects it into `BLOCK_INIT`, so a block can hide/blur mature affordances.
@@ -40,6 +41,7 @@ import { useTransportSnapshot } from './useBlockContext.js';
  * const hiddenByYourSettings = effectiveBrowsingLevel !== maxBrowsingLevel;
  */
 export function useDomainMaturity() {
+    useTransportConnection();
     const snap = useTransportSnapshot();
     const maxBrowsingLevel = snap.maxBrowsingLevel;
     // The one number every gate below is computed from. `effectiveBrowsingCeiling`

package/dist/hooks/useEntitlements.js

@@ -4,6 +4,7 @@ import { useBlockContext } from './useBlockContext.js';
 import { useBlockToken } from './useBlockToken.js';
 import { useHostOrigin } from './useHostOrigin.js';
 import { useRequestSequencer } from './useRequestSequencer.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Backstop timeout for the direct REST entitlements GET (see {@link useTip} /
  * {@link useGenerationResources} for why direct-fetch hooks need their own bound).
@@ -51,6 +52,7 @@ const HOST_ORIGIN_WAIT_MS = 30_000;
  * return owns('extra-slots') ? <Unlocked /> : <BuyButton onDone={refetch} />;
  */
 export function useEntitlements() {
+    useTransportConnection();
     const host = useHostOrigin();
     const { raw } = useBlockToken();
     const { ready, viewer } = useBlockContext();

package/dist/hooks/useGatedImages.js

@@ -1,6 +1,7 @@
 import { useCallback } from 'react';
 import { getTransport } from '../transport/singleton.js';
 import { sendTypedRequest } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Read per-viewer gated display data for a list of image ids via the
  * host-mediated `GET_IMAGES_BY_IDS` → `IMAGES_RESULT` bridge — the read side of
@@ -39,6 +40,7 @@ import { sendTypedRequest } from '../transport/transport.js';
  * }
  */
 export function useGatedImages() {
+    useTransportConnection();
     const getImages = useCallback(async (imageIds) => {
         const reply = await sendTypedRequest(getTransport(), { type: 'GET_IMAGES_BY_IDS', payload: { imageIds } }, 'IMAGES_RESULT');
         if (reply.error || !reply.result) {

package/dist/hooks/useGenerationResources.js

@@ -2,6 +2,7 @@ import { useCallback, useEffect, useRef } from 'react';
 import { buildGenerationResourcesUrl, responseToResources, } from '../api/generationResources.js';
 import { useHostOrigin } from './useHostOrigin.js';
 import { useBlockToken } from './useBlockToken.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Backstop timeout for the direct REST fetch. Unlike the postMessage hooks
  * (which inherit the transport's 30s request timeout), this hook talks to the
@@ -32,6 +33,7 @@ const GENERATION_RESOURCES_TIMEOUT_MS = 30_000;
  * // resources[0].strength / .minStrength / .maxStrength / .trainedWords / .clipSkip
  */
 export function useGenerationResources() {
+    useTransportConnection();
     const host = useHostOrigin();
     const { raw } = useBlockToken();
     // In-flight AbortControllers, aborted on unmount so a pending fetch never

package/dist/hooks/useGoodPurchase.js

@@ -6,6 +6,7 @@ import { resolveIdempotencyKey } from '../transport/transport.js';
 import { useBlockToken } from './useBlockToken.js';
 import { useBuzzPurchase } from './useBuzzPurchase.js';
 import { useHostOrigin } from './useHostOrigin.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * The consent-gated scope a purchase needs.
  *
@@ -80,6 +81,7 @@ export class GoodPurchaseRefusal extends Error {
  * );
  */
 export function useGoodPurchase() {
+    useTransportConnection();
     const host = useHostOrigin();
     const { raw } = useBlockToken();
     const { openPurchaseModal } = useBuzzPurchase();

package/dist/hooks/useHostOrigin.js

@@ -1,5 +1,6 @@
 import { useSyncExternalStore } from 'react';
 import { getTransport } from '../transport/singleton.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Returns the validated host (parent) origin the block may safely direct-fetch
  * the civitai App Blocks HTTP API against — `undefined` until the transport
@@ -33,6 +34,7 @@ import { getTransport } from '../transport/singleton.js';
  * moment init lands.
  */
 export function useHostOrigin() {
+    useTransportConnection();
     const transport = getTransport();
     const origin = useSyncExternalStore((cb) => transport.subscribe(cb), () => transport.getHostOrigin(), 
     // Server snapshot: no host origin is known before hydration.

package/dist/hooks/useImageUpload.js

@@ -2,6 +2,7 @@ import { useCallback, useEffect, useRef } from 'react';
 import { HUMAN_INTERACTION_TIMEOUT_MS } from '../transport/requestTimeouts.js';
 import { getTransport } from '../transport/singleton.js';
 import { sendTypedRequest, subscribeTyped } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Generous hook-side backstop for {@link BlockImageScanResult} delivery. The
  * host-side scan POLL budget is authoritative and the consuming app applies its
@@ -28,6 +29,7 @@ function isTerminalVerdict(v) {
     return v.status === 'scanned' || v.status === 'blocked';
 }
 export function useImageUpload(options) {
+    useTransportConnection();
     const purpose = options?.purpose;
     const asyncScan = options?.asyncScan === true && purpose !== 'generationSource';
     // Per-instance scan tracking, keyed by imageId. Persists across renders; a

package/dist/hooks/useNestedDocument.js

@@ -1,5 +1,6 @@
 import { useEffect, useState } from 'react';
 import { fetchNestedDocument } from '@civitai/app-sdk/blocks';
+import { useTransportConnection } from './useTransportConnection.js';
 const IDLE = { status: 'idle', srcDoc: null, error: null };
 const LOADING = { status: 'loading', srcDoc: null, error: null };
 /**
@@ -61,6 +62,7 @@ const NESTED_DOCUMENT_TIMEOUT_MS = 30_000;
  * ```
  */
 export function useNestedDocument(options) {
+    useTransportConnection();
     const src = options?.src;
     const baseUrl = options?.baseUrl;
     const [state, setState] = useState(src ? LOADING : IDLE);

package/dist/hooks/usePrepareTrainingDataset.js

@@ -4,6 +4,7 @@ import { withConsentRetry } from '../internal/withConsentRetry.js';
 import { WORKFLOW_REQUEST_TIMEOUT_MS } from '../transport/requestTimeouts.js';
 import { getTransport } from '../transport/singleton.js';
 import { RequestTimeoutError, sendTypedRequest } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * The consent-gated scope the training flow requires — `ai:write:budgeted`. The
  * server refuses a dataset request from a token without it (it is the spend
@@ -101,6 +102,7 @@ export class PrepareTrainingDatasetError extends Error {
  * }
  */
 export function usePrepareTrainingDataset() {
+    useTransportConnection();
     const [pending, setPending] = useState(false);
     const [error, setError] = useState(null);
     // The consent wait can outlive the component; see `useCreatePostFromApp`.

package/dist/hooks/usePublishGenerationOutputs.js

@@ -2,6 +2,7 @@ import { useCallback } from 'react';
 import { HUMAN_INTERACTION_TIMEOUT_MS } from '../transport/requestTimeouts.js';
 import { getTransport } from '../transport/singleton.js';
 import { sendTypedRequest } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Publish selected outputs of one of the calling app's OWN generations into bare,
  * real-scanned public `Image` rows via the host-mediated
@@ -28,6 +29,7 @@ import { sendTypedRequest } from '../transport/transport.js';
  * // …store imageIds via useSharedStorage() so the grid can read them back gated.
  */
 export function usePublishGenerationOutputs() {
+    useTransportConnection();
     const publish = useCallback(async (args) => {
         const reply = await sendTypedRequest(getTransport(), {
             type: 'PUBLISH_GENERATION_OUTPUTS',

package/dist/hooks/useRequestConsent.js

@@ -1,6 +1,7 @@
 import { useCallback } from 'react';
 import { sendRequestConsent } from '../internal/withConsentRetry.js';
 import { getTransport } from '../transport/singleton.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Lazy consent. Asks the host to open civitai.com's consent UI when a
  * LOGGED-IN viewer clicks an action whose consent-gated scope the block token
@@ -43,6 +44,7 @@ import { getTransport } from '../transport/singleton.js';
  * requestConsent({ scopes: ['ai:write:budgeted', 'buzz:read:self'] });
  */
 export function useRequestConsent() {
+    useTransportConnection();
     const requestConsent = useCallback((payload) => {
         // Single-sourced with the SDK's own automatic prompt-and-retry
         // (`internal/withConsentRetry.ts`), which posts the identical message. The

package/dist/hooks/useRequestSignIn.js

@@ -1,5 +1,6 @@
 import { useCallback } from 'react';
 import { getTransport } from '../transport/singleton.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * Anonymous conversion. Asks the host to start civitai.com's login flow when a
  * logged-out viewer (`useBlockContext().viewer === null`) clicks an action that
@@ -19,6 +20,7 @@ import { getTransport } from '../transport/singleton.js';
  * if (viewer === null) return <button onClick={() => requestSignIn()}>Sign in</button>;
  */
 export function useRequestSignIn() {
+    useTransportConnection();
     const requestSignIn = useCallback((payload) => {
         getTransport().sendMessage({
             type: 'REQUEST_SIGN_IN',

package/dist/hooks/useResourcePicker.js

@@ -3,6 +3,7 @@ import { throwOnReplyError } from '../internal/replyError.js';
 import { HUMAN_INTERACTION_TIMEOUT_MS } from '../transport/requestTimeouts.js';
 import { getTransport } from '../transport/singleton.js';
 import { sendTypedRequest } from '../transport/transport.js';
+import { useTransportConnection } from './useTransportConnection.js';
 /**
  * The most resources ONE multi-select `open({ multiple })` can return — the
  * same cap the generation body puts on `additionalResources`, so a full batch
@@ -86,6 +87,7 @@ const MULTIPLE_RESOURCE_TYPES = new Set(['lora', 'locon', 'dora']);
  * }
  */
 export function useResourcePicker() {
+    useTransportConnection();
     const open = useCallback(async (opts) => {
         if (opts.multiple == null) {
             const { selected } = await sendTypedRequest(getTransport(), {