@notionhq/custom-blocks 0.1.32 → 0.1.33

package/dist/bridge/SandboxBridge.d.ts

@@ -58,6 +58,7 @@ export declare class SandboxBridge {
      */
     setMockState(message: InitMessage): void;
     completeInitialization(): void;
+    private sendInitResultError;
     private applyInit;
     /**
      * Lets the initial application render commit before we acknowledge init. The host keeps the

package/dist/bridge/SandboxBridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SandboxBridge.d.ts","sourceRoot":"","sources":["../../../../home/runner/work/custom-blocks/custom-blocks/sdk/src/bridge/SandboxBridge.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,gBAAgB,EAEhB,MAAM,4DAA4D,CAAA;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAA;AAW3E,OAAO,EAEN,KAAK,WAAW,EAEhB,MAAM,mDAAmD,CAAA;AAc1D,OAAO,KAAK,EACX,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,aAAa,EACb,eAAe,EACf,8BAA8B,EAC9B,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,MAAM,aAAa,CAAA;AASpB,OAAO,EACN,KAAK,oBAAoB,EAGzB,MAAM,gBAAgB,CAAA;AACvB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAG3D;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,UAAU,CAAA;IAC9B,IAAI,EAAE,OAAO,CAAA;CACb,CAAA;AAID,qBAAa,aAAa;IACzB,OAAO,CAAC,SAAS,CAIhB;IACD,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,mBAAmB,CAAwB;IACnD,OAAO,CAAC,aAAa,CAAI;IACzB,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAEjC;IACD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAE9B;IACD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAE9B;IACD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAEhC;IACD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAEjC;IACD,OAAO,CAAC,cAAc,CAAQ;IAC9B,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,iBAAiB,CAAQ;IACjC,OAAO,CAAC,uBAAuB,CAAgB;IAC/C,OAAO,CAAC,wBAAwB,CAA+B;IAC/D,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,UAAU,CAAuC;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAK3B;IAED,cAAc;IAQd,OAAO,CAAC,MAAM,CAAC,eAAe,CAAM;IAEpC,OAAO,CAAC,UAAU;IAclB,aAAa,IAAI,SAAS,eAAe,EAAE;IAI3C,qBAAqB,CAAC,QAAQ,EAAE,MAAM,IAAI;IAK1C,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB9C,WAAW,CAAC,cAAc,EAAE,kBAAkB;IAkC9C,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,4BAA4B;IAQpC,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,MAAM,CAIb;IAED,OAAO,CAAC,aAAa,CAsQpB;IAED,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI;IAK9B,YAAY,IAAI,oBAAoB;IAIpC;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,WAAW;IAKjC,sBAAsB;IAmBtB,OAAO,CAAC,SAAS;IA6EjB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAyB1B,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB;IAgE/D,OAAO,CAAC,uBAAuB;IAwB/B,UAAU,CAAC,MAAM,EAAE,MAAM;IAazB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8B3D,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAYrD,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAYrD,SAAS,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,eAAe,CAAC;IAa7D,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2C3D;;;;OAIG;IACH,oBAAoB,CAAC,IAAI,EAAE;QAC1B,UAAU,EAAE,gBAAgB,CAAA;QAC5B,MAAM,EAAE,YAAY,CAAA;QACpB,cAAc,EAAE,8BAA8B,CAAA;KAC9C,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAuB7B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;CAkE/B"}
+{"version":3,"file":"SandboxBridge.d.ts","sourceRoot":"","sources":["../../../../home/runner/work/custom-blocks/custom-blocks/sdk/src/bridge/SandboxBridge.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,gBAAgB,EAEhB,MAAM,4DAA4D,CAAA;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAA;AAW3E,OAAO,EAEN,KAAK,WAAW,EAEhB,MAAM,mDAAmD,CAAA;AAc1D,OAAO,KAAK,EACX,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,aAAa,EACb,eAAe,EACf,8BAA8B,EAC9B,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,MAAM,aAAa,CAAA;AASpB,OAAO,EACN,KAAK,oBAAoB,EAGzB,MAAM,gBAAgB,CAAA;AACvB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAG3D;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,UAAU,CAAA;IAC9B,IAAI,EAAE,OAAO,CAAA;CACb,CAAA;AAID,qBAAa,aAAa;IACzB,OAAO,CAAC,SAAS,CAIhB;IACD,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,mBAAmB,CAAwB;IACnD,OAAO,CAAC,aAAa,CAAI;IACzB,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAEjC;IACD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAE9B;IACD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAE9B;IACD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAEhC;IACD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAEjC;IACD,OAAO,CAAC,cAAc,CAAQ;IAC9B,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,iBAAiB,CAAQ;IACjC,OAAO,CAAC,uBAAuB,CAAgB;IAC/C,OAAO,CAAC,wBAAwB,CAA+B;IAC/D,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,UAAU,CAAuC;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAK3B;IAED,cAAc;IAQd,OAAO,CAAC,MAAM,CAAC,eAAe,CAAM;IAEpC,OAAO,CAAC,UAAU;IAclB,aAAa,IAAI,SAAS,eAAe,EAAE;IAI3C,qBAAqB,CAAC,QAAQ,EAAE,MAAM,IAAI;IAK1C,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB9C,WAAW,CAAC,cAAc,EAAE,kBAAkB;IAkC9C,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,4BAA4B;IAQpC,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,MAAM,CAIb;IAED,OAAO,CAAC,aAAa,CAgRpB;IAED,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI;IAK9B,YAAY,IAAI,oBAAoB;IAIpC;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,WAAW;IAKjC,sBAAsB;IAmBtB,OAAO,CAAC,mBAAmB;IAmB3B,OAAO,CAAC,SAAS;IAkEjB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAyB1B,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB;IAgE/D,OAAO,CAAC,uBAAuB;IAwB/B,UAAU,CAAC,MAAM,EAAE,MAAM;IAazB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8B3D,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAYrD,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAYrD,SAAS,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,eAAe,CAAC;IAa7D,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2C3D;;;;OAIG;IACH,oBAAoB,CAAC,IAAI,EAAE;QAC1B,UAAU,EAAE,gBAAgB,CAAA;QAC5B,MAAM,EAAE,YAAY,CAAA;QACpB,cAAc,EAAE,8BAA8B,CAAA;KAC9C,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAuB7B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;CAkE/B"}

package/dist/bridge/SandboxBridge.js

@@ -53,6 +53,14 @@ export class SandboxBridge {
             if (!parsed.success) {
                 console.warn("[custom-blocks-sdk] ignoring malformed host message", parsed.issues);
                 const incomingType = readIncomingType(event.data);
+                if (!this.hasReceivedInit &&
+                    incomingType === "init" &&
+                    this.initializationId !== undefined &&
+                    readInitializationId(event.data) === this.initializationId) {
+                    this.hasReceivedInit = true;
+                    this.sendInitResultError(invalidInitPayloadError(parsed.issues));
+                    return;
+                }
                 // Loop guard: never NACK a NACK. Excludes both directions —
                 // `invalidSandboxMessage` is what the host normally sends, but
                 // a buggy host that echoes our own `invalidHostMessage` back
@@ -400,6 +408,24 @@ export class SandboxBridge {
         this.postToHost(result);
         this.flushPendingOutboundMessages();
     }
+    sendInitResultError(error) {
+        if (this.hasSentInitResult || this.initializationId === undefined) {
+            return;
+        }
+        const result = {
+            type: "initResult",
+            initializationId: this.initializationId,
+            status: "error",
+            error,
+        };
+        this.hasSentInitResult = true;
+        this.postToHost(result);
+        if (this.rejectInit) {
+            this.rejectInit(new CustomBlockInitializationError(error));
+            this.resolveInit = undefined;
+            this.rejectInit = undefined;
+        }
+    }
     applyInit(message, postResult) {
         if (postResult) {
             this.isMockState = false;
@@ -429,18 +455,7 @@ export class SandboxBridge {
             : resolveMockDataSources(this.latestDataSourceBindings);
         const bindingError = getInitBindingError(message.manifest, dataSources);
         if (postResult && bindingError !== undefined) {
-            const result = {
-                type: "initResult",
-                initializationId: message.initializationId,
-                status: "error",
-                error: bindingError,
-            };
-            this.postToHost(result);
-            if (this.rejectInit) {
-                this.rejectInit(new CustomBlockInitializationError(bindingError));
-                this.resolveInit = undefined;
-                this.rejectInit = undefined;
-            }
+            this.sendInitResultError(bindingError);
             return;
         }
         this.hostState = {
@@ -840,6 +855,22 @@ function makeDataSourceSubscriptionId(args) {
     const { key } = args;
     return `data-source:${encodeURIComponent(key)}`;
 }
+function invalidInitPayloadError(issues) {
+    return {
+        code: "invalid_init_payload",
+        message: formatInvalidHostReason("init", issues),
+        isRetryable: false,
+    };
+}
+function readInitializationId(data) {
+    if (typeof data === "object" &&
+        data !== null &&
+        "initializationId" in data &&
+        typeof data.initializationId === "string") {
+        return data.initializationId;
+    }
+    return undefined;
+}
 function getInitBindingError(manifest, dataSources) {
     for (const [dataSourceKey, manifestDataSource] of Object.entries(manifest.dataSources)) {
         const dataSource = dataSources.find(entry => entry.key === dataSourceKey);

package/dist/protocol/messages/init.d.ts

@@ -2,7 +2,7 @@ import * as v from "valibot";
 import type { CustomBlockErrorCode, CustomBlockErrorInfo } from "../errors.js";
 import type { CustomBlockInitResultErrorCode } from "./initResult.js";
 export declare const customBlockInitErrorCodeSchema: v.StringSchema<undefined>;
-export type CustomBlockInitErrorCode = CustomBlockErrorCode<"manifest_unavailable" | "manifest_invalid" | "invalid_protocol_version" | "unsupported_protocol_version" | "context_unavailable" | "current_user_unavailable" | "missing_data_source_binding" | "data_source_unavailable" | "missing_property_binding" | "invalid_property_binding">;
+export type CustomBlockInitErrorCode = CustomBlockErrorCode<"manifest_unavailable" | "manifest_invalid" | "invalid_connect_payload" | "invalid_protocol_version" | "unsupported_protocol_version" | "context_unavailable" | "current_user_unavailable" | "missing_data_source_binding" | "data_source_unavailable" | "missing_property_binding" | "invalid_property_binding">;
 export type CustomBlockInitErrorInfo = CustomBlockErrorInfo<CustomBlockInitErrorCode>;
 /**
  * Every initialization failure visible to block code. This combines errors

package/dist/protocol/messages/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../../../home/runner/work/custom-blocks/custom-blocks/protocol/src/messages/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAG5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAO9E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAA;AAIrE,eAAO,MAAM,8BAA8B,2BAAa,CAAA;AAExD,MAAM,MAAM,wBAAwB,GAAG,oBAAoB,CACxD,sBAAsB,GACtB,kBAAkB,GAClB,0BAA0B,GAC1B,8BAA8B,GAC9B,qBAAqB,GACrB,0BAA0B,GAC1B,6BAA6B,GAC7B,yBAAyB,GACzB,0BAA0B,GAC1B,0BAA0B,CAC5B,CAAA;AAED,MAAM,MAAM,wBAAwB,GACnC,oBAAoB,CAAC,wBAAwB,CAAC,CAAA;AAE/C;;;;GAIG;AACH,MAAM,MAAM,kCAAkC,GAC3C,wBAAwB,GACxB,8BAA8B,GAC9B,oBAAoB,CAAC,eAAe,GAAG,cAAc,CAAC,CAAA;AAEzD,MAAM,MAAM,kCAAkC,GAC7C,oBAAoB,CAAC,kCAAkC,CAAC,CAAA;AAEzD,eAAO,MAAM,8BAA8B;;;;aAIzC,CAAA;AAEF,qBAAa,8BACZ,SAAQ,KACR,YAAW,oBAAoB;gBAEnB,KAAK,EAAE,kCAAkC;IAOrD,IAAI,EAAE,kCAAkC,CAAA;IACxC,WAAW,EAAE,OAAO,CAAA;CACpB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAuB5B,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../../../home/runner/work/custom-blocks/custom-blocks/protocol/src/messages/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAG5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAO9E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAA;AAIrE,eAAO,MAAM,8BAA8B,2BAAa,CAAA;AAExD,MAAM,MAAM,wBAAwB,GAAG,oBAAoB,CACxD,sBAAsB,GACtB,kBAAkB,GAClB,yBAAyB,GACzB,0BAA0B,GAC1B,8BAA8B,GAC9B,qBAAqB,GACrB,0BAA0B,GAC1B,6BAA6B,GAC7B,yBAAyB,GACzB,0BAA0B,GAC1B,0BAA0B,CAC5B,CAAA;AAED,MAAM,MAAM,wBAAwB,GACnC,oBAAoB,CAAC,wBAAwB,CAAC,CAAA;AAE/C;;;;GAIG;AACH,MAAM,MAAM,kCAAkC,GAC3C,wBAAwB,GACxB,8BAA8B,GAC9B,oBAAoB,CAAC,eAAe,GAAG,cAAc,CAAC,CAAA;AAEzD,MAAM,MAAM,kCAAkC,GAC7C,oBAAoB,CAAC,kCAAkC,CAAC,CAAA;AAEzD,eAAO,MAAM,8BAA8B;;;;aAIzC,CAAA;AAEF,qBAAa,8BACZ,SAAQ,KACR,YAAW,oBAAoB;gBAEnB,KAAK,EAAE,kCAAkC;IAOrD,IAAI,EAAE,kCAAkC,CAAA;IACxC,WAAW,EAAE,OAAO,CAAA;CACpB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAuB5B,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA"}

package/dist/protocol/messages/initResult.d.ts

@@ -1,7 +1,14 @@
 import * as v from "valibot";
 import type { CustomBlockErrorCode, CustomBlockErrorInfo } from "../errors.js";
 export declare const customBlockInitResultErrorCodeSchema: v.StringSchema<undefined>;
-export type CustomBlockInitResultErrorCode = CustomBlockErrorCode<"invalid_init_bindings">;
+export type CustomBlockInitResultErrorCode = CustomBlockErrorCode<
+/**
+ * The host-provided bindings defined in `init.dataSources` were rejected by the sandbox because
+ * they did not completely match the expected manifest keys.
+ */
+"invalid_init_bindings"
+/** The host-provided `init` payload failed to parse. */
+ | "invalid_init_payload">;
 export type CustomBlockInitResultErrorInfo = CustomBlockErrorInfo<CustomBlockInitResultErrorCode>;
 export declare const customBlockInitResultErrorInfoSchema: v.ObjectSchema<{
     readonly code: v.StringSchema<undefined>;

package/dist/protocol/messages/initResult.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initResult.d.ts","sourceRoot":"","sources":["../../../../../home/runner/work/custom-blocks/custom-blocks/protocol/src/messages/initResult.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAI9E,eAAO,MAAM,oCAAoC,2BAAa,CAAA;AAE9D,MAAM,MAAM,8BAA8B,GACzC,oBAAoB,CAAC,uBAAuB,CAAC,CAAA;AAE9C,MAAM,MAAM,8BAA8B,GACzC,oBAAoB,CAAC,8BAA8B,CAAC,CAAA;AAErD,eAAO,MAAM,oCAAoC;;;;aAI/C,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;IAKlC,0EAA0E;;;;;;;;;;;0BAU1E,CAAA;AAEF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAA"}
+{"version":3,"file":"initResult.d.ts","sourceRoot":"","sources":["../../../../../home/runner/work/custom-blocks/custom-blocks/protocol/src/messages/initResult.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAI9E,eAAO,MAAM,oCAAoC,2BAAa,CAAA;AAE9D,MAAM,MAAM,8BAA8B,GAAG,oBAAoB;AAChE;;;GAGG;AACD,uBAAuB;AACzB,wDAAwD;GACtD,sBAAsB,CACxB,CAAA;AAED,MAAM,MAAM,8BAA8B,GACzC,oBAAoB,CAAC,8BAA8B,CAAC,CAAA;AAErD,eAAO,MAAM,oCAAoC;;;;aAI/C,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;IAKlC,0EAA0E;;;;;;;;;;;0BAU1E,CAAA;AAEF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAA"}

package/dist/version.js

@@ -4,4 +4,4 @@
  *
  * WARNING: Generated during SDK publish. Do not edit in the published package.
  */
-export const CUSTOM_BLOCKS_SDK_VERSION = "0.1.32"
+export const CUSTOM_BLOCKS_SDK_VERSION = "0.1.33"

package/docs/errors.md

@@ -39,6 +39,22 @@ Unlike request helpers, `initCustomBlock` rejects with `CustomBlockInitializatio
 
 `CustomBlockInitializationErrorInfo` is the matching `{ code, message, isRetryable }` object type.
 
+Initialization errors have direction-specific meanings:
+
+- `invalid_connect_payload` means that the host could not parse the SDK's
+  `connect` message. The host sends this code in `init.error` when it can read
+  the `initializationId`.
+- `invalid_init_payload` means that the SDK could not parse the host's `init`
+  message. The SDK sends this code in `initResult.error` when it can read the
+  expected `initializationId`.
+- `invalid_init_bindings` means that the SDK could not apply the data source
+  bindings in the host's valid `init` message. The SDK sends this code in
+  `initResult.error`.
+- `invalid_init_result_payload` means that the host could not parse the SDK's
+  `initResult`. This is a host-local error. The SDK does not send this code.
+- `no_init_result` means that the host did not receive a valid `initResult`
+  before its timeout.
+
 See [Lifecycle and initialization](./lifecycle.md) for initialization-specific error codes.
 
 ## Handling errors

package/docs/lifecycle.md

@@ -1,27 +1,65 @@
 # Lifecycle
 
-The SDK ↔ host handshake, the React wrapper that runs it, and the auto-resize hook that keeps the iframe in sync with your content.
-
-## Handshake
-
-`initCustomBlock()` handles three messages:
-
-1. The SDK sends `connect` with a new initialization ID and version information.
-2. The host sends `init`. It includes the same ID, the manifest, block context, current user, and data source bindings.
-3. The SDK sends `initResult` with the ID and the initial block height.
-
-The promise resolves when the SDK applies the host state. Await it before React renders so hooks read initialized state. The SDK sends `initResult` after the initial render.
-
-- Rejects with `CustomBlockInitializationError` code `init_timeout` if the host doesn't respond.
-- In a top-level browser tab (no parent frame), rejects with `NotInIframeError` code `not_in_iframe`. `<NotionCustomBlock>` catches this, seeds placeholders, and renders `children` behind a warning banner so dev-time previews still work.
-- After init, compatible hosts use `*Changed` events (e.g. `themeChanged`, `contrastModeChanged`, `parentChanged`, `dataSourcesChanged`) to push updates and re-render the relevant hooks.
-- `initCustomBlock` is idempotent; subsequent calls return the same promise.
+The SDK and host use a three-message `postMessage` handshake to initialize
+a custom block.
+
+This handshake can be completed with one of these APIs:
+
+- `<NotionCustomBlock>` for most React blocks. It starts initialization and
+  renders `children` after the host state is ready.
+- `useCustomBlockInit()` for React blocks that need to control loading and
+  error states.
+- `initCustomBlock()` for framework-neutral code or code that must await
+  initialization before it renders.
+
+Custom bridge integrations can also handle the `postMessage` wire messages
+directly. This is advanced usage for host or integration authors.
+
+## Initialization protocol message
+
+The full `postMessage` handshake is:
+
+1. The SDK sends `connect` with a new `initializationId` and version
+   information.
+2. The host sends `init` with the same `initializationId`, the manifest, data source bindings,
+   and additional block and app context.
+3. The SDK validates and applies `init`, renders the initial content, and sends
+   `initResult` with the same `initializationId` and the initial block height.
+
+Both sides must check that the `initializationId` matches. The SDK ignores an
+`init` with a different ID. It sends `initResult` only after it applies a
+matching `init`.
+
+The initialization promise resolves after the SDK applies the host state.
+Await it before rendering code that reads initialized state. The SDK sends
+`initResult` after the initial render.
+
+- The promise rejects with `CustomBlockInitializationError` code
+  `init_timeout` if the host does not send a usable `init`.
+- If a matching `init` is malformed, the SDK sends `initResult.error` with code
+  `invalid_init_payload` and rejects with the same structured error.
+- If the host sends incomplete or invalid data source bindings, the SDK sends
+  `initResult.error` with code `invalid_init_bindings` and rejects with the same
+  structured error.
+- If the SDK cannot correlate a malformed `init` to the handshake, it sends
+  `invalidHostMessage` when safe.
+- After initialization, compatible hosts use `*Changed` messages to push live
+  updates.
+- `initCustomBlock()` is idempotent. Later calls return the same promise.
+
+## Rendering inside a host
+
+The SDK expects the custom block to run inside an iframe. In a top-level
+browser tab, initialization rejects with `NotInIframeError` code
+`not_in_iframe`.
+
+`<NotionCustomBlock>` catches this error and renders a standalone preview with
+a warning. This supports local development when no host is available.
 
 ## Sizing
 
-All blocks resize to fit their content. The Notion app limits block height to 10,000 pixels.
-
-To set a shorter height, set `max-height` and `overflow-y` on `#root`:
+Custom blocks resize to fit their content by default. To set a shorter height, set
+`max-height` and `overflow-y` on `#root`:
 
 ```css
 #root {
@@ -30,9 +68,25 @@ To set a shorter height, set `max-height` and `overflow-y` on `#root`:
 }
 ```
 
+The Notion app enforces a maximum custom block height of 10,000 pixels.
+
+The SDK measures the `#root` element and sends its initial height in
+`initResult.success`. It sends later height changes in `resize` messages. The
+host uses these messages to keep the iframe height in sync.
+
+Using `<NotionCustomBlock>` enables this behavior automatically. Use
+`customBlock.autoResize()` for a custom, framework-neutral initialization wrapper.
+
 ## API
 
-Import framework-neutral APIs from `@notionhq/custom-blocks`; import React hooks and components from `@notionhq/custom-blocks/react`. The runtime APIs below assume `initCustomBlock()` has resolved — initialized-only hooks and `customBlock` getters throw if called before that. Inside `<NotionCustomBlock>` (or past the `isLoaded` gate of `useCustomBlockInit`), single-value hooks return non-nullable values.
+Import framework-neutral APIs from `@notionhq/custom-blocks`. Import React
+hooks and components from `@notionhq/custom-blocks/react`.
+
+The APIs below require successful initialization unless stated otherwise.
+Initialized-only hooks and `customBlock` getters throw before
+`initCustomBlock()` resolves. Inside `<NotionCustomBlock>`, or after the
+`isLoaded` gate of `useCustomBlockInit`, single-value hooks return non-nullable
+values.
 
 ### `<NotionCustomBlock>`
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@notionhq/custom-blocks",
-	"version": "0.1.32",
+	"version": "0.1.33",
 	"license": "MIT",
 	"type": "module",
 	"publishConfig": {

package/src/bridge/SandboxBridge.ts

@@ -258,6 +258,16 @@ export class SandboxBridge {
 				parsed.issues,
 			)
 			const incomingType = readIncomingType(event.data)
+			if (
+				!this.hasReceivedInit &&
+				incomingType === "init" &&
+				this.initializationId !== undefined &&
+				readInitializationId(event.data) === this.initializationId
+			) {
+				this.hasReceivedInit = true
+				this.sendInitResultError(invalidInitPayloadError(parsed.issues))
+				return
+			}
 			// Loop guard: never NACK a NACK. Excludes both directions —
 			// `invalidSandboxMessage` is what the host normally sends, but
 			// a buggy host that echoes our own `invalidHostMessage` back
@@ -548,6 +558,25 @@ export class SandboxBridge {
 		this.flushPendingOutboundMessages()
 	}
 
+	private sendInitResultError(error: CustomBlockInitResultErrorInfo) {
+		if (this.hasSentInitResult || this.initializationId === undefined) {
+			return
+		}
+		const result: InitResultMessage = {
+			type: "initResult",
+			initializationId: this.initializationId,
+			status: "error",
+			error,
+		}
+		this.hasSentInitResult = true
+		this.postToHost(result)
+		if (this.rejectInit) {
+			this.rejectInit(new CustomBlockInitializationError(error))
+			this.resolveInit = undefined
+			this.rejectInit = undefined
+		}
+	}
+
 	private applyInit(message: InitMessage, postResult: boolean) {
 		if (postResult) {
 			this.isMockState = false
@@ -581,18 +610,7 @@ export class SandboxBridge {
 			: resolveMockDataSources(this.latestDataSourceBindings)
 		const bindingError = getInitBindingError(message.manifest, dataSources)
 		if (postResult && bindingError !== undefined) {
-			const result: InitResultMessage = {
-				type: "initResult",
-				initializationId: message.initializationId,
-				status: "error",
-				error: bindingError,
-			}
-			this.postToHost(result)
-			if (this.rejectInit) {
-				this.rejectInit(new CustomBlockInitializationError(bindingError))
-				this.resolveInit = undefined
-				this.rejectInit = undefined
-			}
+			this.sendInitResultError(bindingError)
 			return
 		}
 		this.hostState = {
@@ -1066,6 +1084,28 @@ function makeDataSourceSubscriptionId(args: { key: string }): string {
 	return `data-source:${encodeURIComponent(key)}`
 }
 
+function invalidInitPayloadError(
+	issues: readonly v.BaseIssue<unknown>[],
+): CustomBlockInitResultErrorInfo {
+	return {
+		code: "invalid_init_payload",
+		message: formatInvalidHostReason("init", issues),
+		isRetryable: false,
+	}
+}
+
+function readInitializationId(data: unknown): string | undefined {
+	if (
+		typeof data === "object" &&
+		data !== null &&
+		"initializationId" in data &&
+		typeof data.initializationId === "string"
+	) {
+		return data.initializationId
+	}
+	return undefined
+}
+
 function getInitBindingError(
 	manifest: CustomBlockManifest,
 	dataSources: NotionDataSource[],