@civitai/sdk 0.19.0 → 0.19.1

package/dist/app/index.d.ts

@@ -1,5 +1,5 @@
 import type { BlockContext, BlockSettings, Theme, ViewerInfo } from '../core/handshake.js';
-import type { BlockTransport } from '../core/transport.js';
+import { type BlockTransport } from '../core/transport.js';
 import { type Host } from '../host/index.js';
 import { type OrchestrationClient } from '../orchestration/index.js';
 import { type GrantOptions, type Scope, type TokenOptions, type TokenSessionOptions } from '../session/index.js';

package/dist/app/index.js

@@ -1,5 +1,6 @@
 import { BridgeError, CivitaiError } from '../core/errors.js';
 import { getTransport } from '../core/get-transport.js';
+import { isLocalPreviewStorage } from '../core/transport.js';
 import { createHost, createHostSession } from '../host/index.js';
 import { ApiError, createHttp } from '../http/index.js';
 import { createOrchestrationClient, DEFAULT_ORCHESTRATION_URL, } from '../orchestration/index.js';
@@ -26,13 +27,16 @@ export async function initialize(options = {}) {
     // from `token.scopes`. A published app whose manifest forgot `apps:storage`
     // holds a token that looks the same as a preview's, and must keep getting the
     // real route's `insufficient_scope` rather than a silent local store.
-    const local = snapshot().storageMode === 'local-preview'
+    const localPreview = isLocalPreviewStorage(snapshot());
+    // The same latched answer configures the session below, so `requestGrants`
+    // and the store agree on whether the document store is local.
+    const local = localPreview
         ? // The manifest arrives only from `blockManifestPlugin()`'s dev-server
             // global: there is deliberately no option to pass one.
             await createLocalPreviewStorage(readInjectedManifest(), snapshot().viewer)
         : undefined;
     return {
-        ...createAppClient(createHostSession(transport), options, holdsBlockTokenNow, holdsOAuthTokenNow, local),
+        ...createAppClient(createHostSession(transport, { localPreviewStorage: localPreview }), options, holdsBlockTokenNow, holdsOAuthTokenNow, local),
         host: createHost(transport),
         get viewer() {
             return snapshot().viewer;

package/dist/core/transport.d.ts

@@ -63,6 +63,15 @@ export interface BlockTransport {
     on(type: string, handler: (payload: unknown) => void): () => void;
 }
 export declare const EMPTY_SNAPSHOT: BlockSnapshot;
+/**
+ * Did the host mark this frame a dev-tunnel preview whose document store is
+ * served locally? THE predicate for that question. `initialize()` reads it once
+ * and the one latched answer selects the local document store AND tells the
+ * host session which scopes no grant can add (`requestGrants`), so the two
+ * cannot disagree. Never inferred from `token.scopes`: a published app whose
+ * token lacks `apps:storage` looks the same as a preview's.
+ */
+export declare function isLocalPreviewStorage(snapshot: Pick<BlockSnapshot, 'storageMode'>): boolean;
 /** Convert a wire `BlockInitPayload` (ISO string expiresAt) into a `BlockSnapshot`. */
 export declare function snapshotFromInit(payload: BlockInitPayload, hostOrigin: string): BlockSnapshot;
 /** Wire `WrappedToken` (ISO expiry) → runtime `BlockToken` (Date expiry). */

package/dist/core/transport.js

@@ -10,6 +10,17 @@ export const EMPTY_SNAPSHOT = {
     blockInstanceId: '',
     hostOrigin: null,
 };
+/**
+ * Did the host mark this frame a dev-tunnel preview whose document store is
+ * served locally? THE predicate for that question. `initialize()` reads it once
+ * and the one latched answer selects the local document store AND tells the
+ * host session which scopes no grant can add (`requestGrants`), so the two
+ * cannot disagree. Never inferred from `token.scopes`: a published app whose
+ * token lacks `apps:storage` looks the same as a preview's.
+ */
+export function isLocalPreviewStorage(snapshot) {
+    return snapshot.storageMode === LOCAL_PREVIEW_STORAGE;
+}
 /** Convert a wire `BlockInitPayload` (ISO string expiresAt) into a `BlockSnapshot`. */
 export function snapshotFromInit(payload, hostOrigin) {
     return {

package/dist/doc-store/local-preview.d.ts

@@ -1,4 +1,5 @@
 import type { ViewerInfo } from '../core/handshake.js';
+import type { Scope } from '../session/index.js';
 import { type DocumentStorage } from './index.js';
 /**
  * The document store for a DEV-TUNNEL PREVIEW: the host marked the frame
@@ -22,6 +23,15 @@ import { type DocumentStorage } from './index.js';
  * `tests/guards/local-preview-manifest-global.test.mjs`.
  */
 export declare const LOCAL_PREVIEW_MANIFEST_GLOBAL = "__CIVITAI_LOCAL_PREVIEW_MANIFEST__";
+/**
+ * The scopes the local document store serves: the two the server's document
+ * store checks (`fake.ts` enforces the same pair). A preview token never
+ * carries them and no grant can add them, so `requestGrants` treats them as
+ * held in a local preview instead of asking the host. Shared storage
+ * (`apps:storage:shared:*`) and the deprecated key/value scopes are NOT here:
+ * they keep the real routes in a preview.
+ */
+export declare const LOCAL_PREVIEW_STORAGE_SCOPES: ReadonlySet<Scope>;
 /** What a local preview reads from the manifest: the scopes it declares and its `storage` block. */
 export interface LocalPreviewManifest {
     scopes?: readonly string[];

package/dist/doc-store/local-preview.js

@@ -21,6 +21,18 @@ import { createDocumentStorage, StorageError } from './index.js';
  * `tests/guards/local-preview-manifest-global.test.mjs`.
  */
 export const LOCAL_PREVIEW_MANIFEST_GLOBAL = '__CIVITAI_LOCAL_PREVIEW_MANIFEST__';
+/**
+ * The scopes the local document store serves: the two the server's document
+ * store checks (`fake.ts` enforces the same pair). A preview token never
+ * carries them and no grant can add them, so `requestGrants` treats them as
+ * held in a local preview instead of asking the host. Shared storage
+ * (`apps:storage:shared:*`) and the deprecated key/value scopes are NOT here:
+ * they keep the real routes in a preview.
+ */
+export const LOCAL_PREVIEW_STORAGE_SCOPES = new Set([
+    'apps:storage',
+    'apps:storage:publish',
+]);
 /** The manifest the dev server injected, if any. */
 export function readInjectedManifest() {
     const value = globalThis[LOCAL_PREVIEW_MANIFEST_GLOBAL];

package/dist/host/index.d.ts

@@ -124,5 +124,13 @@ export interface Host {
     }, opts?: HostCallOptions): Promise<number[]>;
 }
 export declare function createHost(transport: BlockTransport): Host;
+export interface HostSessionOptions {
+    /**
+     * The document store is served by the in-tab local store (a dev-tunnel
+     * preview): the value `initialize()` latched from `isLocalPreviewStorage`.
+     * `requestGrants` then treats `LOCAL_PREVIEW_STORAGE_SCOPES` as held.
+     */
+    localPreviewStorage?: boolean;
+}
 /** The token the host minted for this block, kept current as the host rotates it. */
-export declare function createHostSession(transport: BlockTransport): Session;
+export declare function createHostSession(transport: BlockTransport, { localPreviewStorage }?: HostSessionOptions): Session;

package/dist/host/index.js

@@ -1,6 +1,7 @@
 import { BridgeError } from '../core/errors.js';
 import { createCaller, createListener, createNotifier } from '../core/messaging.js';
 import { tokenFromWrapped } from '../core/transport.js';
+import { LOCAL_PREVIEW_STORAGE_SCOPES } from '../doc-store/local-preview.js';
 const call = createCaller();
 const notify = createNotifier();
 const on = createListener();
@@ -254,7 +255,7 @@ function asScanResult(value) {
     return { status: 'error', ...(typeof v?.message === 'string' ? { message: v.message } : {}) };
 }
 /** The token the host minted for this block, kept current as the host rotates it. */
-export function createHostSession(transport) {
+export function createHostSession(transport, { localPreviewStorage = false } = {}) {
     return {
         async getToken({ fresh, signal } = {}) {
             if (!fresh)
@@ -263,7 +264,14 @@ export function createHostSession(transport) {
             const { token } = await call('REQUEST_TOKEN', { blockInstanceId }, { transport, signal });
             return tokenFromWrapped(token).raw;
         },
-        requestGrants: (scopes, opts = {}) => requestGrants(transport, scopes, opts),
+        requestGrants: (scopes, opts = {}) => requestGrants(transport, 
+        // A preview token never carries a document-store scope and no grant can
+        // add one, so asking the host for it could only be refused — and the
+        // refusal would take the rest of the request down with it. The local
+        // store serves them; ask only for the rest. Nothing on the token changes.
+        localPreviewStorage
+            ? scopes.filter((scope) => !LOCAL_PREVIEW_STORAGE_SCOPES.has(scope))
+            : scopes, opts),
     };
 }
 /**

package/dist/version.generated.d.ts

@@ -1,2 +1,2 @@
 /** This package's version, reported to the host as `sdkVersion` in `BLOCK_READY`. */
-export declare const VERSION = "0.19.0";
+export declare const VERSION = "0.19.1";

package/dist/version.generated.js

@@ -1,3 +1,3 @@
 /* AUTOGENERATED from package.json by scripts/gen-version.mjs. DO NOT EDIT. */
 /** This package's version, reported to the host as `sdkVersion` in `BLOCK_READY`. */
-export const VERSION = "0.19.0";
+export const VERSION = "0.19.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civitai/sdk",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "description": "The Civitai SDK: an app holds a token and calls the Civitai API and the orchestrator; a block asks its host only to show host UI.",
   "license": "MIT",
   "type": "module",