stillmade-sdk 0.1.0 → 0.1.1

package/MODULES.md

@@ -135,9 +135,11 @@ WebAssembly codec. Images arrive as saved references: read the bytes with
 - Generating code at run time (`new Function`, used by Emscripten bindings) is
   allowed inside the sandbox.
 
-Module Blocks run in StillMade in the browser. Scheduled and unattended server
-runs need the server sandbox, which is not enabled yet; those runs report
-`RUNTIME_UNAVAILABLE`.
+Module Blocks run in StillMade in the person's browser, only while StillMade is
+open. They cannot run on a schedule, from an event or on new media: StillMade has
+no server sandbox for them. A workflow's background run stops before a module Step
+and the person runs it in the project. Marketplace listings show module Blocks as
+**Browser only**. For work that must run unattended, use a JavaScript Block.
 
 ## Test, pack and import
 

package/SDK.md

@@ -1888,8 +1888,8 @@ event through an input with `"semantic": "workflow_event"` and
 `"sources": ["project"]`.
 
 Triggers work for recipe, JavaScript and hosted (`runtime: "capability"`)
-Blocks. Module Blocks run in a browser and cannot run unattended until
-StillMade enables its server sandbox. Sandboxed code has 25 seconds per run.
+Blocks. Module Blocks run only in the person's browser, so they cannot declare
+triggers or run unattended. Sandboxed code has 25 seconds per run.
 
 ### Hosted Blocks run inside an approved budget
 
@@ -2136,9 +2136,11 @@ WebAssembly codec. Images arrive as saved references: read the bytes with
 - Generating code at run time (`new Function`, used by Emscripten bindings) is
   allowed inside the sandbox.
 
-Module Blocks run in StillMade in the browser. Scheduled and unattended server
-runs need the server sandbox, which is not enabled yet; those runs report
-`RUNTIME_UNAVAILABLE`.
+Module Blocks run in StillMade in the person's browser, only while StillMade is
+open. They cannot run on a schedule, from an event or on new media: StillMade has
+no server sandbox for them. A workflow's background run stops before a module Step
+and the person runs it in the project. Marketplace listings show module Blocks as
+**Browser only**. For work that must run unattended, use a JavaScript Block.
 
 ### Test, pack and import
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stillmade-sdk",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "StillMade Block SDK, CLI and examples",
   "license": "PolyForm-Shield-1.0.0",
   "type": "module",

package/packages/block-sdk/runtime.js

@@ -55,7 +55,7 @@ export async function runPackageAsync(pkg, values, options = {}) {
     // A module runs only through an injected executor: StillMade's sandboxed
     // browser Worker, or the CLI's local Node worker for the creator's own tests.
     const pinned=structuredClone(pkg),input=validateValues(pinned.manifest.inputs,values);
-    assert(typeof options.module==='function','RUNTIME_UNAVAILABLE','Module Blocks run in StillMade in the browser, or locally with the SDK CLI. Unattended server runs need the server sandbox, which is not enabled on this host.');
+    assert(typeof options.module==='function','RUNTIME_UNAVAILABLE','Module Blocks run in StillMade in the browser, or locally with the SDK CLI. They cannot run unattended: StillMade has no server sandbox for module Blocks.');
     const result=await executeHostCall(structuredClone(pinned),input,{signal:options.signal,execute:options.module});
     assert(!options.signal?.aborted,'CANCELLED','Run cancelled');
     assert(result&&typeof result==='object'&&Object.keys(result).every(key=>['outputs','logs'].includes(key)),'MODULE_RESULT','The module host returned an unexpected result');

package/packages/block-sdk/triggers.js

@@ -6,8 +6,8 @@
 
 export const BLOCK_TRIGGER_EVENTS=Object.freeze(['media.saved','schedule','webhook','project.completed','provider']);
 export const BLOCK_TRIGGER_LIMITS=Object.freeze({triggers:4,labelLength:120,minEverySeconds:60,maxEverySeconds:31536000});
-// Runtimes StillMade can run without anyone present. Module Blocks join them
-// when the server sandbox is enabled; until then they run in a browser.
+// Runtimes StillMade can run without anyone present. Module Blocks run only in
+// the person's browser (StillMade has no server sandbox for them).
 export const UNATTENDED_RUNTIMES=Object.freeze(['recipe','javascript','capability']);
 const MEDIA_TYPES=['image','video','audio','asset'];
 const MEDIA_KINDS=['image','video','audio'];
@@ -27,7 +27,7 @@ export function triggerProblems(manifest){
  const triggers=manifest?.triggers,problems=[],add=(path,message)=>problems.push({path,message});
  if(triggers===undefined)return problems;
  if(!Array.isArray(triggers)||!triggers.length||triggers.length>BLOCK_TRIGGER_LIMITS.triggers){add('triggers',`Declare 1–${BLOCK_TRIGGER_LIMITS.triggers} triggers`);return problems;}
- if(!UNATTENDED_RUNTIMES.includes(manifest.runtime))add('triggers',manifest.runtime==='module'?'Module Blocks run in a browser; triggers need a recipe, JavaScript or hosted (capability) Block until StillMade enables its server sandbox':'Triggers need a recipe, JavaScript or hosted (capability) Block');
+ if(!UNATTENDED_RUNTIMES.includes(manifest.runtime))add('triggers',manifest.runtime==='module'?'Module Blocks run only in the person\'s browser, so they cannot have triggers. Use a recipe, JavaScript or hosted (capability) Block for triggers':'Triggers need a recipe, JavaScript or hosted (capability) Block');
  const seen=new Set();
  triggers.forEach((trigger,index)=>{
   const path=`triggers.${index}`;