@civitai/blocks-react 0.74.0 → 0.74.1

package/README.md

@@ -3166,9 +3166,11 @@ a backdrop click, and re-opens on the next render if `open` still says `true`.
 - **Search is debounced** (300 ms), and a newer search cancels the one in
   flight. A busy catalog (`429` / `503`, rate limit 150 requests per 10 s per
   block) is retried after its `Retry-After`, twice, then offered as "Try again".
-- **An anonymous viewer** gets a sign-in message on the "mine" list; "All" works.
-  An expired block token is not mistaken for that: on a `401` the picker mints a
-  fresh token through `useBlockToken().refresh()` and retries once.
+- **An anonymous viewer** gets a sign-in message on the "mine" list as soon as
+  the catalog answers `401`, with no `REQUEST_TOKEN` to the host first — the
+  picker knows the viewer is anonymous from `useBlockContext()`. "All" works. An expired block token is not mistaken for
+  that: for a signed-in viewer, or on "All", a `401` makes the picker mint a
+  fresh token through `useBlockToken().refresh()` and retry once.
 - **Before `BLOCK_INIT`** the picker says it is not connected yet, and lists as
   soon as the host origin lands.
 - **Under the mock host** there is no catalog to call. Pass canned results from

package/dist/ui/WorkflowPicker.js

@@ -1,5 +1,7 @@
 import { createElement, useEffect, useLayoutEffect, useMemo, useRef } from 'react';
 import { blockTokenSource, defineCivitaiResourcePicker, ResourceSourceError, } from '@civitai/components/civitai-resource-picker';
+import { isSignedIn } from '@civitai/app-sdk/blocks';
+import { useBlockContext } from '../hooks/useBlockContext.js';
 import { useBlockToken } from '../hooks/useBlockToken.js';
 import { useHostOrigin } from '../hooks/useHostOrigin.js';
 /** The two model types a posted workflow can have; `ComfyWorkflows` is the retired one. */
@@ -24,9 +26,17 @@ export function WorkflowPicker({ open, onPick, onDismiss, owner = 'any', heading
     defineCivitaiResourcePicker();
     const host = useHostOrigin();
     const { raw, refresh } = useBlockToken();
+    const { ready, viewer } = useBlockContext();
     // Read at each request, so a refreshed token is the one sent.
     const token = useRef({ raw, refresh });
     token.current = { raw, refresh };
+    // Defensive, and unreachable today: the live source exists only once
+    // `useHostOrigin()` is set, which happens at BLOCK_INIT — the same moment
+    // `ready` flips — so no search reads the `undefined` arm and no test covers
+    // it. It is here so that a pre-init `viewer: null` (also null) can never be
+    // read as anonymous if that ordering changes.
+    const signedIn = useRef(undefined);
+    signedIn.current = ready ? isSignedIn(viewer) : undefined;
     const live = useMemo(() => host
         ? blockTokenSource({
             origin: host,
@@ -36,6 +46,10 @@ export function WorkflowPicker({ open, onPick, onDismiss, owner = 'any', heading
             getToken: (options) => options?.fresh
                 ? token.current.refresh().then((fresh) => fresh.raw, () => token.current.raw)
                 : token.current.raw,
+            // An anonymous viewer's `mine` 401 is "sign in", not "expired":
+            // shown at once, without a REQUEST_TOKEN round trip to the host
+            // (which would only hand back the same anonymous token).
+            signedIn: () => signedIn.current,
         })
         : NOT_CONNECTED, [host]);
     const ref = useRef(null);

package/dist/version.generated.d.ts

@@ -1,3 +1,3 @@
 /** This package's version, reported to the host as `sdkVersion` in `BLOCK_READY`. */
-export declare const VERSION = "0.74.0";
+export declare const VERSION = "0.74.1";
 //# sourceMappingURL=version.generated.d.ts.map

package/dist/version.generated.js

@@ -1,4 +1,4 @@
 /* AUTOGENERATED from package.json by scripts/gen-version.mjs. DO NOT EDIT. */
 /** This package's version, reported to the host as `sdkVersion` in `BLOCK_READY`. */
-export const VERSION = "0.74.0";
+export const VERSION = "0.74.1";
 //# sourceMappingURL=version.generated.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civitai/blocks-react",
-  "version": "0.74.0",
+  "version": "0.74.1",
   "description": "React hooks and iframe transport for Civitai Apps. Pairs with @civitai/app-sdk/blocks.",
   "license": "MIT",
   "type": "module",
@@ -37,7 +37,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@civitai/components": "^0.11.0",
+    "@civitai/components": "^0.12.0",
     "@civitai/theme": "^0.5.2"
   },
   "comment-peerDependencies": "This floor is DERIVED, not chosen — the lowest published app-sdk that exports every symbol this package imports. Do not edit it without reading ./PEER_FLOOR.md (in-repo, unpublished) and tests/guards/blocks-react-peer-floor.test.mjs.",