stillmade-sdk 0.1.24 → 0.1.25

package/AGENTS.md

@@ -16,6 +16,10 @@ Treat the current SDK (`stillmade.block.json` manifest, `packages/block-sdk` con
 
 Before building, check what already exists (`find_existing_blocks` over MCP, or the Marketplace and your library) by the inputs, results and operations the goal needs. Use an installed or reviewed Block that already does it; remix a close one so its license, notices and creator credit stay attached; chain existing Blocks and build only the missing step. Never republish another creator's source without remix lineage: public copies are refused. Build a new Block when nothing fits or the person asks for their own version, and say which similar Blocks you considered.
 
+## Three sizes of Block
+
+Blocks come in three sizes and the manifest decides which (packages/block-sdk/block-tier.js): an app is a workspace a person works in (Editor, Canvas, Shots), placed in a Type and never wired automatically; a job is one deliverable a person would name (the narration, the captioned clip), built from the hosted operations it needs (`permissions.capabilities`) and reviewed in one place, the unit Chat picks for a Step; an ingredient is one hosted operation with nothing of its own (a declarative capability Block), what a job is made of. When two ingredients would stand in a row to make one deliverable (writing the words, then voicing them), build or pick the job that does both and keep the review point inside it. A job declares a second output when another Block consumes the intermediate (the script beside the voice); split into two jobs only when the intermediate has a life of its own or the halves have different owners or payment.
+
 ## One job per Step
 
 A Step is one job: the work between two moments where a person or the outside world must see the result. Start a new Step only at one of three points; everything else is a part of the neighboring Step.

package/PASTE_TO_LLM.md

@@ -14,6 +14,10 @@ Treat the current SDK (`stillmade.block.json` manifest, `packages/block-sdk` con
 
 Before building, check what already exists (`find_existing_blocks` over MCP, or the Marketplace and your library) by the inputs, results and operations the goal needs. Use an installed or reviewed Block that already does it; remix a close one so its license, notices and creator credit stay attached; chain existing Blocks and build only the missing step. Never republish another creator's source without remix lineage: public copies are refused. Build a new Block when nothing fits or the person asks for their own version, and say which similar Blocks you considered.
 
+### Three sizes of Block
+
+Blocks come in three sizes and the manifest decides which (packages/block-sdk/block-tier.js): an app is a workspace a person works in (Editor, Canvas, Shots), placed in a Type and never wired automatically; a job is one deliverable a person would name (the narration, the captioned clip), built from the hosted operations it needs (`permissions.capabilities`) and reviewed in one place, the unit Chat picks for a Step; an ingredient is one hosted operation with nothing of its own (a declarative capability Block), what a job is made of. When two ingredients would stand in a row to make one deliverable (writing the words, then voicing them), build or pick the job that does both and keep the review point inside it. A job declares a second output when another Block consumes the intermediate (the script beside the voice); split into two jobs only when the intermediate has a life of its own or the halves have different owners or payment.
+
 ### One job per Step
 
 A Step is one job: the work between two moments where a person or the outside world must see the result. Start a new Step only at one of three points; everything else is a part of the neighboring Step.

package/SDK.md

@@ -192,6 +192,10 @@ Treat the current SDK (`stillmade.block.json` manifest, `packages/block-sdk` con
 
 Before building, check what already exists (`find_existing_blocks` over MCP, or the Marketplace and your library) by the inputs, results and operations the goal needs. Use an installed or reviewed Block that already does it; remix a close one so its license, notices and creator credit stay attached; chain existing Blocks and build only the missing step. Never republish another creator's source without remix lineage: public copies are refused. Build a new Block when nothing fits or the person asks for their own version, and say which similar Blocks you considered.
 
+### Three sizes of Block
+
+Blocks come in three sizes and the manifest decides which (packages/block-sdk/block-tier.js): an app is a workspace a person works in (Editor, Canvas, Shots), placed in a Type and never wired automatically; a job is one deliverable a person would name (the narration, the captioned clip), built from the hosted operations it needs (`permissions.capabilities`) and reviewed in one place, the unit Chat picks for a Step; an ingredient is one hosted operation with nothing of its own (a declarative capability Block), what a job is made of. When two ingredients would stand in a row to make one deliverable (writing the words, then voicing them), build or pick the job that does both and keep the review point inside it. A job declares a second output when another Block consumes the intermediate (the script beside the voice); split into two jobs only when the intermediate has a life of its own or the halves have different owners or payment.
+
 ### One job per Step
 
 A Step is one job: the work between two moments where a person or the outside world must see the result. Start a new Step only at one of three points; everything else is a part of the neighboring Step.
@@ -6908,7 +6912,7 @@ Generated from the SDK source (197 codes). The message is one example; the actua
 | REQUIREMENT | Choose a declared input requirement. | `interactive-requirements`, `package-jobs`, `sandbox-node` and 1 more |
 | RESOLVER | Choose an exact asset version for scoped resolution. | `universal-resolver` |
 | RUNTIME | Sandbox memory configuration was not applied | `javascript` |
-| RUNTIME_RESTRICTED | Local admission supports recipes, isolated JavaScript, declarative capabilities and ComfyUI workflows. Hosted execution still requires account review. | `local-admission`, `portable` |
+| RUNTIME_RESTRICTED | Portable Blocks support recipe, isolated JavaScript, declarative host capabilities and reviewed ComfyUI workflows. Arbitrary Python and native code are restricted; do not package a substitute that pretends to provide them. | `portable` |
 | RUNTIME_UNAVAILABLE | This host does not provide interactive Block questions. Supply this input before running. | `javascript`, `recipe`, `runtime` |
 | SCHEMA | Numbers must be finite | `contracts`, `semantic-contracts` |
 | SEMANTIC | Resolve meanings from at most 200 pinned Block manifests. | `package-semantics`, `semantic-contracts` |
@@ -7249,6 +7253,10 @@ Treat the current SDK (`stillmade.block.json` manifest, `packages/block-sdk` con
 
 Before building, check what already exists (`find_existing_blocks` over MCP, or the Marketplace and your library) by the inputs, results and operations the goal needs. Use an installed or reviewed Block that already does it; remix a close one so its license, notices and creator credit stay attached; chain existing Blocks and build only the missing step. Never republish another creator's source without remix lineage: public copies are refused. Build a new Block when nothing fits or the person asks for their own version, and say which similar Blocks you considered.
 
+### Three sizes of Block
+
+Blocks come in three sizes and the manifest decides which (packages/block-sdk/block-tier.js): an app is a workspace a person works in (Editor, Canvas, Shots), placed in a Type and never wired automatically; a job is one deliverable a person would name (the narration, the captioned clip), built from the hosted operations it needs (`permissions.capabilities`) and reviewed in one place, the unit Chat picks for a Step; an ingredient is one hosted operation with nothing of its own (a declarative capability Block), what a job is made of. When two ingredients would stand in a row to make one deliverable (writing the words, then voicing them), build or pick the job that does both and keep the review point inside it. A job declares a second output when another Block consumes the intermediate (the script beside the voice); split into two jobs only when the intermediate has a life of its own or the halves have different owners or payment.
+
 ### One job per Step
 
 A Step is one job: the work between two moments where a person or the outside world must see the result. Start a new Step only at one of three points; everything else is a part of the neighboring Step.
@@ -12273,6 +12281,7 @@ The latest version of each Block bundled with the SDK, generated from the packag
 | `sm.whiteboard-assistant` 1.0.0 | Build Whiteboard | task | `board` board-document · project context only; `request` text · primary | `edit` workspace-edit · primary |
 | `sm.write-summary` 1.0.0 | Write summary | task | `data` text (external_data) · primary | `summary` text (summary_report) · primary |
 | `sm.youtube` 2.0.0 | YouTube publication | task | `video` video (finished_video) · primary; `title` text; `description` text; `tags` text; `visibility` text; `publishAt` text; `madeForKids` boolean; `aiGenerated` boolean | `uploadAction` approval (portable_media_action); `publication` json (youtube_publication) |
+| `stillmade.narration` 1.0.0 | Narration | workspace | `brief` brief (project_brief) · primary; `script` script (narration_script); `tone` text (narration_tone); `rules` text (writing_rules); `voice` text (speech_voice); `speed` number (speech_speed); `take` audio (narration_audio) | `script` script (narration_script); `audio` audio (narration_audio) · primary |
 | `stillmade.occasion-story` 1.0.2 | Occasion Story | task | `assets` asset[] (legacy.asset-list.assets) · primary; `occasion` text (stillmade.occasion_story.occasion); `title` text (stillmade.occasion_story.title); `ending` text (stillmade.occasion_story.ending); `notes` text (stillmade.occasion_story.notes); `selections` text (stillmade.occasion_story.selections); `music` audio[] (stillmade.occasion_story.music); `musicVolume` number (stillmade.occasion_story.musicvolume); `muteVideoAudio` boolean (stillmade.occasion_story.mutevideoaudio); `aspect` text (stillmade.occasion_story.aspect); `disclosure` text (stillmade.occasion_story.disclosure) | `timeline` timeline (legacy.timeline.updatededitor) · primary; `review` json (stillmade.occasion_story.review) |
 | `stillmade.photo-reel-composer` 1.0.2 | Photo Reel Composer | task | `assets` asset[] (legacy.asset-list.assets) · primary; `purpose` text (stillmade.photo_reel.purpose); `title` text (stillmade.photo_reel.title); `captions` text (stillmade.photo_reel.captions); `cta` text (stillmade.photo_reel.cta); `contact` text (stillmade.photo_reel.contact); `demoDisclosure` text (stillmade.photo_reel.demodisclosure); `duration` number (stillmade.photo_reel.duration); `aspect` text (stillmade.photo_reel.aspect); `logo` asset[] (stillmade.photo_reel.logo); `music` asset[] (stillmade.photo_reel.music) | `timeline` timeline (legacy.timeline.updatededitor) · primary; `review` json (stillmade.photo_reel.review); `provenance` json (stillmade.photo_reel.provenance) |
 | `stillmade.product-ad-variants` 1.0.0 | Product Ad Variants | task | `timeline` timeline (legacy.timeline.updatededitor) · primary; `hookA` text (stillmade.product_ad_variants.hooka); `hookB` text (stillmade.product_ad_variants.hookb); `hookC` text (stillmade.product_ad_variants.hookc); `openingA` number (stillmade.product_ad_variants.openinga); `openingB` number (stillmade.product_ad_variants.openingb); `openingC` number (stillmade.product_ad_variants.openingc); `openingDuration` number (stillmade.product_ad_variants.openingduration); `copyApproved` boolean (stillmade.product_ad_variants.copyapproved) | `variantA` timeline (legacy.timeline.updatededitor) · primary; `variantB` timeline (legacy.timeline.updatededitor); `variantC` timeline (legacy.timeline.updatededitor); `review` json (stillmade.product_ad_variants.review) |

package/blocks/narration/package.js

@@ -0,0 +1 @@
+export {default} from './versions/1.0.0/package.js';

package/blocks/narration/versions/1.0.0/package.js

@@ -0,0 +1,221 @@
+// Generated from the owned versioned source by build-package.mjs.
+export default {
+  "manifest": {
+    "schemaVersion": 1,
+    "sdkVersion": "0.1.0",
+    "id": "stillmade.narration",
+    "version": "1.0.0",
+    "name": "Narration",
+    "description": "Turn the facts Chat gathered into spoken words, hear them in a catalog voice or use your own recording, and hand the script and the voiceover on.",
+    "kind": "workspace",
+    "runtime": "module",
+    "license": "MIT",
+    "inputs": {
+      "brief": {
+        "type": "brief",
+        "primary": true,
+        "required": false,
+        "semantic": "project_brief",
+        "description": "The facts the voice speaks from: what is shown, its details, who it is for, how long, and how to reach you. Chat fills this in."
+      },
+      "script": {
+        "type": "script",
+        "required": false,
+        "semantic": "narration_script",
+        "sources": [
+          "upstream",
+          "user"
+        ],
+        "description": "The words the voice says. Written from the facts when empty; change them before the voice runs."
+      },
+      "tone": {
+        "type": "text",
+        "required": false,
+        "default": "warm",
+        "semantic": "narration_tone",
+        "description": "How it sounds: warm, friendly, no-nonsense or luxury."
+      },
+      "rules": {
+        "type": "text",
+        "required": false,
+        "semantic": "writing_rules",
+        "description": "Your own writing rules, such as short sentences or no exclamation marks."
+      },
+      "voice": {
+        "type": "text",
+        "required": false,
+        "default": "onyx",
+        "semantic": "speech_voice",
+        "description": "The catalog voice that reads the script."
+      },
+      "speed": {
+        "type": "number",
+        "required": false,
+        "default": 1,
+        "min": 0.5,
+        "max": 2,
+        "semantic": "speech_speed",
+        "description": "How fast the voice reads, from half to double speed."
+      },
+      "take": {
+        "type": "audio",
+        "required": false,
+        "semantic": "narration_audio",
+        "sources": [
+          "user"
+        ],
+        "description": "Your own recording or audio file, used instead of a generated voice."
+      }
+    },
+    "outputs": {
+      "script": {
+        "type": "script",
+        "required": false,
+        "semantic": "narration_script",
+        "role": "narration_script",
+        "description": "The narration, for shots, captions and the voice."
+      },
+      "audio": {
+        "type": "audio",
+        "primary": true,
+        "required": false,
+        "semantic": "narration_audio",
+        "role": "narration_audio",
+        "description": "The voiceover."
+      }
+    },
+    "permissions": {
+      "project": [],
+      "capabilities": [
+        "text.generate",
+        "audio.speech"
+      ],
+      "network": [],
+      "filesystem": [],
+      "secrets": []
+    },
+    "ui": [],
+    "features": [
+      {
+        "id": "write-script",
+        "label": "Write the script",
+        "does": "Writes spoken narration from the facts in the brief, in the tone you pick, using only those facts.",
+        "asks": [
+          "write a script for my listing video",
+          "turn these car details into a 30 second narration",
+          "write the words for a product video"
+        ],
+        "inputs": [
+          "brief",
+          "tone",
+          "rules"
+        ],
+        "outputs": [
+          "script"
+        ]
+      },
+      {
+        "id": "make-voiceover",
+        "label": "Make the voiceover",
+        "does": "Reads the script in a catalog voice at the speed you choose.",
+        "asks": [
+          "make a voiceover for this script",
+          "read this in a deep voice",
+          "narrate my video"
+        ],
+        "inputs": [
+          "script",
+          "voice",
+          "speed"
+        ],
+        "outputs": [
+          "audio"
+        ]
+      },
+      {
+        "id": "own-recording",
+        "label": "Use your own recording",
+        "does": "Uses an audio file or recording you supply as the voiceover, with the script kept beside it.",
+        "asks": [
+          "use my own voice recording",
+          "I recorded the narration myself"
+        ],
+        "inputs": [
+          "take"
+        ],
+        "outputs": [
+          "audio"
+        ]
+      }
+    ],
+    "platforms": {
+      "phone": {
+        "supported": true
+      },
+      "browser": {
+        "supported": true
+      },
+      "desktop": {
+        "supported": true
+      }
+    },
+    "provenance": {
+      "notice": "MIT License\n\nCopyright (c) <year> <copyright holders>\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of this software and \nassociated documentation files (the \"Software\"), to deal in the Software without restriction, including \nwithout limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell \ncopies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the \nfollowing conditions:\n\nThe above copyright notice and this permission notice shall be included in all copies or substantial \nportions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT \nLIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO \nEVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER \nIN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE \nUSE OR OTHER DEALINGS IN THE SOFTWARE.\n"
+    }
+  },
+  "module": {
+    "schemaVersion": 1,
+    "entry": "main.js",
+    "files": {
+      "main.js": {
+        "sha256": "a5eed2032d2ba5365d2dbb5b4bb4d483f6e7aee8604a004b69cdcacca1d20b32",
+        "bytes": 4703,
+        "mediaType": "text/javascript"
+      }
+    }
+  },
+  "moduleSource": {
+    "main.js": "// Narration: one job in two hosted steps. With no script, the facts in the\n// brief become spoken words (text.generate) and the run ends so the person can\n// read and change them. With a script, the words become a voice (audio.speech),\n// or the person's own take is used as it is. Every call is quoted and approved\n// by StillMade; this code never sees a provider, a key or a price.\nconst WORDS_PER_MINUTE = 150;\nconst SPEECH_LIMIT = 3800;\nconst VOICE = /^[a-z][a-z0-9_-]{0,63}$/;\nconst TONES = {\n  warm: 'Warm and welcoming, like a trusted local who wants to help.',\n  friendly: 'Upbeat and friendly, in plain words and short sentences.',\n  'no-nonsense': 'Direct and factual, with no filler and no hype.',\n  luxury: 'Calm, polished and unhurried; confident, never pushy.',\n};\n\nconst text = value => typeof value === 'string' ? value.trim() : '';\n// A brief or script value is {schemaVersion: 1, text}; older briefs carry a topic.\nfunction words(value) {\n  if (typeof value === 'string') return value.trim();\n  if (!value || typeof value !== 'object') return '';\n  for (const key of ['text', 'topic', 'summary']) if (text(value[key])) return text(value[key]);\n  return Object.entries(value).filter(([key, item]) => key !== 'schemaVersion' && ['string', 'number'].includes(typeof item)).map(([key, item]) => `${key}: ${item}`).join('\\n');\n}\nfunction targetWords(brief) {\n  const seconds = /\\b(\\d{1,3})\\s*(?:s|sec|secs|second|seconds)\\b/i.exec(brief);\n  if (seconds) return Math.max(15, Math.round(Number(seconds[1]) / 60 * WORDS_PER_MINUTE));\n  const minutes = /\\b(\\d{1,2}|one|two|three)\\s*(?:min|mins|minute|minutes)\\b/i.exec(brief);\n  if (minutes) return Math.min(560, ({ one: 1, two: 2, three: 3 }[minutes[1].toLowerCase()] || Number(minutes[1])) * WORDS_PER_MINUTE);\n  return 75;\n}\nfunction toneGuidance(tone, rules) {\n  const preset = TONES[String(tone || 'warm').toLowerCase()];\n  return [preset || text(tone) || TONES.warm, text(rules)].filter(Boolean).join(' ');\n}\n// What the model returns is the script and nothing else: no fences, labels or quotes.\nfunction cleanScript(reply) {\n  let script = text(reply).replace(/^```[a-z]*\\s*|\\s*```$/g, '').trim();\n  script = script.replace(/^(?:script|narration|voiceover)\\s*:\\s*/i, '').trim();\n  if (/^[\"“].*[\"”]$/s.test(script)) script = script.slice(1, -1).trim();\n  return script.replace(/[ \\t]+\\n/g, '\\n').replace(/\\n{3,}/g, '\\n\\n');\n}\nconst SYSTEM = 'You write spoken narration for short videos. Use only the facts you are given: never add a price, mileage, phone number, address, web address, award, inspection, warranty or history that is not in them, and never claim to have checked anything. Write for the ear: plain sentences that read well aloud, no headings, lists, stage directions, speaker labels, emojis, markdown or quotation marks. Return the narration only.';\n\nexport default async function run(input, stillmade) {\n  const brief = words(input.brief), script = words(input.script), rules = text(input.rules);\n  if (!script) {\n    if (!brief) throw new Error('Add the facts the voice should speak from, or type the script.');\n    stillmade.progress(0.2, 'Writing the script');\n    const count = targetWords(brief);\n    const prompt = `Facts (use only these):\\n${brief}\\n\\nWrite the spoken narration for a short video about this. Tone: ${toneGuidance(input.tone, rules)} Length: about ${count} words (${Math.round(count / WORDS_PER_MINUTE * 60)} seconds at ${WORDS_PER_MINUTE} words a minute). End with the contact or next step from the facts when there is one.`;\n    const reply = await stillmade.hosted.run('text.generate', { prompt, system: SYSTEM, maxTokens: Math.min(1600, Math.max(300, count * 4)) });\n    const written = cleanScript(reply);\n    if (!written) throw new Error('No script came back. Add more facts and write again.');\n    stillmade.progress(1, 'Script written');\n    return { script: { schemaVersion: 1, text: written } };\n  }\n  const result = { script: { schemaVersion: 1, text: script } };\n  if (input.take) {\n    stillmade.log('Using the supplied recording.');\n    return { ...result, audio: input.take };\n  }\n  if (script.length > SPEECH_LIMIT) throw new Error(`The script is longer than one voice take (${SPEECH_LIMIT.toLocaleString('en-US')} characters). Shorten it, or split it.`);\n  const voice = VOICE.test(String(input.voice || '')) ? String(input.voice) : 'onyx';\n  const speed = Number.isFinite(input.speed) && input.speed >= 0.5 && input.speed <= 2 ? input.speed : 1;\n  stillmade.progress(0.4, 'Making the voice');\n  const audio = await stillmade.hosted.run('audio.speech', { text: script, settings: { voice, speed } });\n  stillmade.progress(1, 'Voiceover ready');\n  return { ...result, audio };\n}\n"
+  },
+  "view": {
+    "runtime": "frame",
+    "html": "<main class=\"sm-block nr\">\n  <section class=\"sm-stage nr-stage\" id=\"stage\" aria-live=\"polite\">\n    <div class=\"sm-empty\" id=\"empty\">\n      <span class=\"sm-glyph\" data-glyph=\"audio\" aria-hidden=\"true\"></span>\n      <p>No narration yet</p>\n    </div>\n    <div class=\"nr-take\" id=\"take\" hidden>\n      <audio id=\"player\" controls preload=\"metadata\"></audio>\n      <p class=\"nr-meta\"><span id=\"length\"></span><span id=\"from\"></span></p>\n    </div>\n  </section>\n  <div class=\"sm-field\">\n    <span class=\"sm-label\"><label for=\"facts\">Facts</label><details class=\"sm-hint\"><summary aria-label=\"About the facts\" title=\"About the facts\"></summary><p>What the voice may say: the thing, its details, who it is for, how long, and how to reach you. Chat fills this from your conversation; change it here.</p></details><span class=\"sm-status\" id=\"facts-state\"></span></span>\n    <textarea id=\"facts\" rows=\"3\" maxlength=\"6000\" data-stillmade-share=\"facts\" placeholder=\"2021 Toyota RAV4 XLE, $27,995, 31,200 miles, one owner. Sunrise Motors, (555) 201-7788.\"></textarea>\n  </div>\n  <div class=\"sm-field\">\n    <span class=\"sm-label\"><label for=\"words\">Script</label><span class=\"sm-status\" id=\"words-state\"></span></span>\n    <textarea id=\"words\" rows=\"7\" maxlength=\"3800\" data-stillmade-share=\"words\" placeholder=\"Written from the facts, or type what the voice says.\"></textarea>\n  </div>\n  <fieldset class=\"sm-choices\" data-compact id=\"voice\" data-stillmade-share=\"voice\">\n    <legend>Voice</legend>\n    <label><input type=\"radio\" name=\"voice\" value=\"onyx\" checked><span class=\"sm-glyph\" data-glyph=\"audio\" aria-hidden=\"true\"></span><span>Onyx <small>deep</small></span></label>\n    <label><input type=\"radio\" name=\"voice\" value=\"nova\"><span class=\"sm-glyph\" data-glyph=\"audio\" aria-hidden=\"true\"></span><span>Nova <small>bright</small></span></label>\n    <label><input type=\"radio\" name=\"voice\" value=\"alloy\"><span class=\"sm-glyph\" data-glyph=\"audio\" aria-hidden=\"true\"></span><span>Alloy <small>even</small></span></label>\n  </fieldset>\n  <div class=\"sm-actions\">\n    <button type=\"button\" class=\"sm-primary\" id=\"action\" data-stillmade-action=\"run\">Write script</button>\n    <button type=\"button\" class=\"sm-quiet\" id=\"again\" hidden>Write again</button>\n    <p class=\"sm-status\" id=\"status\" role=\"status\"></p>\n    <details class=\"sm-hint\" id=\"why\" hidden><summary aria-label=\"Why\" title=\"Why\"></summary><p id=\"why-text\"></p></details>\n  </div>\n  <details class=\"sm-more\" id=\"more\">\n    <summary>More</summary>\n    <div class=\"sm-settings\">\n      <fieldset class=\"sm-choices\" data-compact id=\"tone\" data-stillmade-share=\"tone\">\n        <legend>Tone</legend>\n        <label><input type=\"radio\" name=\"tone\" value=\"warm\" checked><span>Warm</span></label>\n        <label><input type=\"radio\" name=\"tone\" value=\"friendly\"><span>Friendly</span></label>\n        <label><input type=\"radio\" name=\"tone\" value=\"no-nonsense\"><span>No-nonsense</span></label>\n        <label><input type=\"radio\" name=\"tone\" value=\"luxury\"><span>Luxury</span></label>\n      </fieldset>\n      <fieldset class=\"sm-choices\" data-segmented id=\"speed\" data-stillmade-share=\"speed\">\n        <legend>Speed</legend>\n        <label><input type=\"radio\" name=\"speed\" value=\"0.9\"><span>Slower</span></label>\n        <label><input type=\"radio\" name=\"speed\" value=\"1\" checked><span>Normal</span></label>\n        <label><input type=\"radio\" name=\"speed\" value=\"1.15\"><span>Faster</span></label>\n      </fieldset>\n      <div class=\"sm-field\"><label for=\"rules\">Own rules</label><input id=\"rules\" type=\"text\" maxlength=\"300\" data-stillmade-share=\"rules\" placeholder=\"Short sentences, no exclamation marks\"></div>\n    </div>\n  </details>\n</main>\n",
+    "css": "/* The Block kit (injected by the host) carries the layout; this file only draws\n   the voiceover on the stage: the player and its two facts. */\n.nr [hidden] { display: none !important; }\n.nr-stage { display: grid; align-content: center; justify-items: stretch; gap: var(--s-2, 8px); min-height: 180px; }\n/* A voiceover is short: on a wide screen the stage hugs the player instead of stretching down the column. */\n@container (min-width: 860px) { .sm-block:not([data-layout]) > .nr-stage { align-self: start; min-height: 220px; } }\n.nr-stage > .sm-empty { justify-self: center; }\n.nr-take { display: grid; gap: var(--s-2, 8px); width: 100%; }\n.nr-take audio { width: 100%; }\n.nr-meta { display: flex; justify-content: space-between; gap: var(--s-3, 12px); margin: 0; color: var(--fg-muted); font-size: var(--fs-body-s, .875rem); font-variant-numeric: tabular-nums; }\n#voice { --sm-tile: 120px; }\n#voice small { color: var(--fg-subtle); font-size: var(--fs-caption, .8125rem); margin-inline-start: 4px; }\n#tone { --sm-tile: 110px; }\n",
+    "javascript": "(()=>{\n\"use strict\";\n// The Narration interface on the Block kit: the voiceover on the stage, the\n// facts and the script on the left, the voice as chips, and one button that\n// names the next step: Write script, then Make voiceover, or Use my recording.\n// The status beside it says the state in a few words; the price is StillMade's.\nconst $ = id => document.getElementById(id);\nconst state = { input: {}, outputs: {}, busy: false, previewUrl: null, previewFor: null, factsFromChat: false };\nconst message = error => String(error && error.message || error || 'Something went wrong.');\nconst say = (id, text) => { $(id).textContent = text || ''; };\nconst trimmed = value => String(value || '').trim();\nconst wordCount = text => trimmed(text) ? trimmed(text).split(/\\s+/).length : 0;\nconst clock = seconds => { const whole = Math.max(0, Math.round(seconds)); return Math.floor(whole / 60) + ':' + String(whole % 60).padStart(2, '0'); };\nconst spoken = text => 'about ' + clock(wordCount(text) / 150 * 60);\nconst picked = name => { const node = document.querySelector('input[name=\"' + name + '\"]:checked'); return node ? node.value : ''; };\nconst pick = (name, value) => { const node = document.querySelector('input[name=\"' + name + '\"][value=\"' + value + '\"]'); if (node) node.checked = true; };\n// A brief or script value is {schemaVersion: 1, text}; older briefs carry a topic.\nconst words = value => typeof value === 'string' ? value : value && typeof value === 'object' ? trimmed(value.text || value.topic || value.summary || '') : '';\nconst facts = () => trimmed($('facts').value);\nconst script = () => trimmed($('words').value);\nconst sameWords = (a, b) => trimmed(a).replace(/\\s+/g, ' ') === trimmed(b).replace(/\\s+/g, ' ');\n\nfunction status(text, tone, why) {\n  const node = $('status');\n  node.textContent = text || '';\n  if (tone) node.dataset.state = tone; else delete node.dataset.state;\n  $('why').hidden = !why; $('why').open = false; say('why-text', why || '');\n}\n// A field the host shares is written through its own input event, so the edit is kept.\nfunction setField(id, value) {\n  const node = $(id);\n  if (node.value === value) return;\n  node.value = value;\n  node.dispatchEvent(new Event('input', { bubbles: true }));\n  node.dispatchEvent(new Event('change', { bubbles: true }));\n}\n\n// ── What the person is about to do ──────────────────────────────────────\nfunction phase() {\n  if (!script()) return 'write';\n  if (state.input.take) return 'take';\n  const audio = state.outputs.audio, made = state.outputs.script;\n  return audio && made && sameWords(words(made), script()) ? 'ready' : 'voice';\n}\nfunction render() {\n  const p = phase(), count = wordCount(script());\n  say('words-state', count ? count + ' words · ' + spoken(script()) : '');\n  say('facts-state', facts() ? (state.factsFromChat ? 'From Chat' : '') : 'Needed');\n  const labels = { write: 'Write script', voice: 'Make voiceover', ready: 'Make voiceover again', take: 'Use my recording' };\n  say('action', labels[p]);\n  $('again').hidden = p === 'write';\n  $('action').disabled = state.busy || (p === 'write' && !facts());\n  $('again').disabled = state.busy;\n  if (state.busy) return;\n  if (p === 'write') status(facts() ? 'Written from the facts' : 'Add the facts first', facts() ? '' : 'waiting', facts() ? 'The script uses only what the facts say; you can change every word before the voice runs.' : 'Chat usually fills the facts from your conversation. Type them here when it has not.');\n  else if (p === 'take') status('Your recording will be used', '', 'The audio you supplied becomes the voiceover; nothing is generated.');\n  else if (p === 'voice') status(state.outputs.audio ? 'Script changed, so the voice runs again' : 'Script is done, so only the voice runs', '', 'Only the voice is generated now; the words stay as written.');\n  else status('Voiceover ready', 'success', '');\n}\n\n// ── The stage: the voiceover, when there is one ───────────────────────────\nasync function showAudio(reference, from) {\n  if (!reference) { $('take').hidden = true; $('empty').hidden = false; return; }\n  $('empty').hidden = true; $('take').hidden = false;\n  say('from', from || '');\n  say('length', Number.isFinite(reference.duration) ? clock(reference.duration) : spoken(script()));\n  const key = reference.assetId + '/' + reference.versionId;\n  if (state.previewFor === key) return;\n  if (state.previewUrl) { try { StillMade.releaseMedia(state.previewUrl); } catch {} state.previewUrl = null; }\n  state.previewFor = key;\n  try {\n    const preview = await StillMade.previewMedia(reference);\n    if (state.previewFor !== key) { try { StillMade.releaseMedia(preview.url); } catch {} return; }\n    state.previewUrl = preview.url; $('player').src = preview.url;\n  } catch (error) {\n    if (typeof reference.url === 'string' && /^https?:|^\\//.test(reference.url)) $('player').src = reference.url;\n    else status(message(error), 'error', '');\n  }\n}\n\n// ── Running ───────────────────────────────────────────────────────────────\nfunction values(forVoice) {\n  const value = {};\n  if (facts()) value.brief = { schemaVersion: 1, text: facts() };\n  value.tone = picked('tone') || 'warm';\n  const rules = trimmed($('rules').value); if (rules) value.rules = rules;\n  if (forVoice) {\n    value.script = { schemaVersion: 1, text: script() };\n    value.voice = picked('voice') || 'onyx';\n    value.speed = Number(picked('speed')) || 1;\n    if (state.input.take) value.take = state.input.take;\n  }\n  return value;\n}\nasync function act(writeAgain) {\n  if (state.busy) return;\n  const p = writeAgain ? 'write' : phase();\n  state.busy = true; render();\n  status(p === 'write' ? 'Writing the script' : p === 'take' ? 'Keeping your recording' : 'Making the voice', 'loading', '');\n  try {\n    const result = await StillMade.run(values(p !== 'write'));\n    state.outputs = { ...state.outputs, ...result };\n    if (p === 'write') { setField('words', words(result.script)); await showAudio(null); }\n    else await showAudio(result.audio, p === 'take' ? 'Your recording' : voiceName());\n  } catch (error) {\n    status(message(error), 'error', '');\n    state.busy = false; render(); return;\n  }\n  state.busy = false; render();\n}\nconst voiceName = () => { const node = document.querySelector('input[name=\"voice\"]:checked'); return node ? node.parentElement.textContent.trim().split(/\\s+/)[0] : 'Voice'; };\n$('action').addEventListener('click', () => act(false));\n$('again').addEventListener('click', () => act(true));\nfor (const id of ['facts', 'words', 'rules']) $(id).addEventListener('input', () => { if (id === 'facts') state.factsFromChat = false; render(); });\nfor (const name of ['tone', 'voice', 'speed']) for (const node of document.querySelectorAll('input[name=\"' + name + '\"]')) node.addEventListener('change', render);\n\n// ── What the host gives: the Step's inputs and what was saved before ──────\nStillMade.onInput(input => {\n  state.input = input || {};\n  fillFromInput();\n  if (typeof state.input.tone === 'string' && state.input.tone in { warm: 1, friendly: 1, 'no-nonsense': 1, luxury: 1 }) pick('tone', state.input.tone);\n  if (typeof state.input.voice === 'string') pick('voice', state.input.voice);\n  render();\n});\n// The host's shared fields start from the saved shared state, which can arrive after the\n// Step's input did and leave a bound field empty; what the input gave is put back then.\nfunction fillFromInput() {\n  const brief = words(state.input.brief);\n  if (brief && !facts()) { setField('facts', brief); state.factsFromChat = true; }\n  const given = words(state.input.script);\n  if (given && !script()) setField('words', given);\n}\nfunction adopt(snapshot) {\n  const outputs = snapshot && snapshot.outputs || {};\n  state.outputs = outputs;\n  fillFromInput();\n  if (outputs.script && !script()) setField('words', words(outputs.script));\n  if (outputs.audio) showAudio(outputs.audio, state.input.take ? 'Your recording' : voiceName()); else showAudio(null);\n  render();\n}\nif (typeof StillMade.onShared === 'function') StillMade.onShared(adopt);\ntry { if (typeof StillMade.getShared === 'function') { const shared = StillMade.getShared(); if (shared && typeof shared.then === 'function') shared.then(adopt, () => {}); else adopt(shared); } } catch {}\nrender();\n\n})();\n"
+  },
+  "tests": [
+    {
+      "name": "Uses the supplied recording as the voiceover and keeps the script beside it",
+      "input": {
+        "script": {
+          "schemaVersion": 1,
+          "text": "Looking for an SUV that does it all? Come see this 2021 Toyota RAV4 XLE at Sunrise Motors."
+        },
+        "take": {
+          "kind": "audio",
+          "assetId": "own-take-asset",
+          "versionId": "own-take-v1",
+          "url": "https://media.example/own-take.mp3",
+          "mimeType": "audio/mpeg",
+          "duration": 34.2,
+          "bytes": 548000
+        }
+      },
+      "expected": {
+        "script": {
+          "schemaVersion": 1,
+          "text": "Looking for an SUV that does it all? Come see this 2021 Toyota RAV4 XLE at Sunrise Motors."
+        },
+        "audio": {
+          "kind": "audio",
+          "assetId": "own-take-asset",
+          "versionId": "own-take-v1",
+          "url": "https://media.example/own-take.mp3",
+          "mimeType": "audio/mpeg",
+          "duration": 34.2,
+          "bytes": 548000
+        }
+      }
+    }
+  ]
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stillmade-sdk",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "description": "StillMade Block SDK, CLI and examples",
   "license": "PolyForm-Shield-1.0.0",
   "type": "module",

package/packages/block-cli/cli.js

@@ -297,9 +297,9 @@ export async function main(rawArgs) {
    const scan=scanPackage(pkg);if(!scan.passed)throw Object.assign(new Error('Portable admission failed'),{report:scan});
    const evidence=['validate','pack'].includes(command)?await verifyPortableSources(pkg):null;
    if(command==='validate')return {valid:true,format:pkg.portable.format,id:pkg.manifest.id,security:scan,execution:'not-run',repositoryEvidence:evidence,...(args.includes('--mobile')?{mobileProfile:mobileProfile()}:{}),...(hosted?{tests:0,fixtureContracts:pkg.tests.length,liveVerified:false,reviewRequired:true}:{})};
-   if(command==='test'){const report=await admitLocalPackage(pkg);if(!report.passed)throw Object.assign(new Error('Portable admission failed'),{report});return report;}
+   if(command==='test'){const report=await admitLocalPackage(pkg,{files:moduleFiles.get(pkg),moduleExecution:true});if(!report.passed)throw Object.assign(new Error('Portable admission failed'),{report});return report;}
    if(command==='pack'){
-    const report=await admitLocalPackage(pkg);if(!report.passed)throw Object.assign(new Error('Portable admission failed'),{report});
+    const report=await admitLocalPackage(pkg,{files:moduleFiles.get(pkg),moduleExecution:true});if(!report.passed)throw Object.assign(new Error('Portable admission failed'),{report});
     const output=resolve(extra||`${pkg.manifest.id}-${pkg.manifest.version}.stillmade-block`);
     if(!output.endsWith('.stillmade-block'))throw new Error('Canonical output must end in .stillmade-block');
     await writeFile(output,writePortableArchive(pkg,archiveCodec()),{flag:'wx'});return {file:output,digest:report.digest,tests:hosted?0:pkg.tests.length,format:pkg.portable.format,admission:report,repositoryEvidence:evidence,...(hosted?{fixtureContracts:pkg.tests.length,execution:'not-run',liveVerified:false,reviewRequired:true}:{})};

package/packages/block-platform/block-readiness.js

@@ -81,7 +81,7 @@ function rehearsalContext(packages){
  * @param options.liveReceipt {digest} of a reviewed live hosted run for this exact package
  * @param options.unsupported {reason,gapClass,primitive} when authoring reported a platform gap
  */
-export async function assessBlockReadiness(pkg,{catalog=FIRST_PARTY_SDK_PACKAGES,admission,platformChecks,sharedEditing,liveReceipt,unsupported,budgetMs=20000,signal}={}){
+export async function assessBlockReadiness(pkg,{catalog=FIRST_PARTY_SDK_PACKAGES,admission,platformChecks,sharedEditing,liveReceipt,unsupported,budgetMs=20000,signal,moduleExecution=false}={}){
  const deadline=Date.now()+budgetMs,left=()=>deadline-Date.now(),items=new Map(),composition={};
  const set=(id,state,detail={})=>{if(!items.has(id)||items.get(id).state!=='failed')items.set(id,{id,title:TITLES[id],state,...detail});};
  const verified=(id,evidence)=>set(id,'verified',{evidence});
@@ -103,7 +103,7 @@ export async function assessBlockReadiness(pkg,{catalog=FIRST_PARTY_SDK_PACKAGES
 
  const manifest=pkg.manifest,sourceDigest=await digest(pkg),hosted=!offline(pkg);
  let report=admission;
- if(!report){try{report=await admitLocalPackage(pkg,{timeoutMs:Math.max(1000,Math.min(15000,left()))});}catch(error){
+ if(!report){try{report=await admitLocalPackage(pkg,{timeoutMs:Math.max(1000,Math.min(15000,left())),moduleExecution:moduleExecution===true});}catch(error){
   // Admission running out of this check's own time budget is not a Block defect.
   const exhausted=error.code==='TIMEOUT'&&/shared budget/.test(error.message||'');
   report={passed:false,results:[{name:'Admission',passed:false,code:exhausted?'READINESS_BUDGET':error.code,message:message(error)}]};

package/packages/block-platform/catalog.js

@@ -2,6 +2,7 @@ import {REVENUE_REVIEW_PROJECT_TYPES} from './revenue-review-project-types.js';
 import {PRODUCT_AD_VARIANTS_PROJECT_TYPE,PRODUCT_AD_VARIANTS_PROJECT_TYPE_1_0_3,PRIOR_PRODUCT_AD_VARIANTS_PROJECT_TYPE,PREVIOUS_PRODUCT_AD_VARIANTS_PROJECT_TYPE} from './product-ad-variants-project-type.js';
 import {FIRST_PARTY_SDK_PACKAGES} from '../block-sdk/first-party-packages.js';
 import {FIRST_REVENUE_PROJECT_TYPES} from './first-revenue-project-types.js';
+import {DEALER_INVENTORY_VIDEO_PROJECT_TYPE} from './dealer-inventory-video-project-type.js';
 import { SDK_VERSION, ROOT_CHAT_ID } from '../block-sdk/contracts.js';
 import {SCRIPT_WRITER_BLOCK} from './script-writer.js';
 import {VIDEO_ASSETS_BLOCK} from './video-assets.js';
@@ -133,16 +134,24 @@ const currentPortableById=new Map();
 // An unset app connector is a project placeholder, not something to find or install.
 // Photo notes is the photo check inside Pick best photos, not a Step of its own.
 export const UNDISCOVERABLE_SDK_BLOCKS=new Set(['sm.connect-app','sm.photo-notes']);
+// Hidden from discovery (October 20, 2026, owner decision): fragments a job now covers (Script
+// Writer and Voiceover are Narration), a second Chat, tools that belong inside their app (the
+// assistants, the Editor's AI edits, references, compare, image editor, scoring) and thin results.
+// Every release stays in BUILTIN_BLOCKS: saved projects and built-in Types keep their pins and run.
+export const HIDDEN_BLOCKS=new Set(['sm.script','sm.voiceover','sm.chat','sm.thumbnail','sm.shot-plan-assistant','sm.blueprint-assistant','sm.animated-scene-assistant','sm.whiteboard-assistant','sm.final-edit','sm.edit-assistant','sm.character','sm.location','sm.style','sm.compare','sm.image-editor','sm.score','sm.research','sm.quality-audit','sm.rough-cut']);
+// Exact releases to hide (id@version) when one release of a shown Block should not be offered; none today.
+export const HIDDEN_RELEASES=new Set([]);
+export const isHiddenBlock=block=>HIDDEN_BLOCKS.has(block.manifest.id)||HIDDEN_RELEASES.has(`${block.manifest.id}@${block.manifest.version}`);
 // Export video is offered as the original Editor opened at its Export (1.0.0), so
 // people can still change the cut before rendering (the owner, Oct 15). The
 // render-only 2.0.0 stays in BUILTIN_BLOCKS for exact project pins and for
 // planning with explicit candidates; a prepared timeline goes to the portable Editor.
 const EXPORT_VIDEO_EDITOR=LEGACY_BLOCKS.find(block=>block.manifest.id==='sm.export-video'&&block.manifest.version==='1.0.0');
 export const DISCOVERED_AS_HOST=new Map([['sm.export-video',EXPORT_VIDEO_EDITOR]]);
-for(const block of SDK_BUILTIN_BLOCKS){if(UNDISCOVERABLE_SDK_BLOCKS.has(block.manifest.id)||DISCOVERED_AS_HOST.has(block.manifest.id))continue;const prior=currentPortableById.get(block.manifest.id);if(!prior||newer(block.manifest.version,prior.manifest.version))currentPortableById.set(block.manifest.id,block);}
+for(const block of SDK_BUILTIN_BLOCKS){if(UNDISCOVERABLE_SDK_BLOCKS.has(block.manifest.id)||DISCOVERED_AS_HOST.has(block.manifest.id)||isHiddenBlock(block))continue;const prior=currentPortableById.get(block.manifest.id);if(!prior||newer(block.manifest.version,prior.manifest.version))currentPortableById.set(block.manifest.id,block);}
 export const DISCOVERABLE_SDK_BUILTIN_BLOCKS = Object.freeze([...currentPortableById.values()]);
 const ACCEPTED_PORTABLE_RELEASES=[...MAIN_HOST_WORKSPACES].map(id=>FIRST_PARTY_SDK_PACKAGES.find(pkg=>pkg.manifest.id===id&&pkg.manifest.version===CURRENT_PORTABLE_WORKSPACE_VERSIONS[id])).filter(Boolean);
-export const DISCOVERABLE_BLOCKS = [STARTING_CHAT_BLOCK,...WORKSPACE_BLOCKS,...ACCEPTED_PORTABLE_RELEASES,...DISCOVERED_AS_HOST.values(),...DISCOVERABLE_SDK_BUILTIN_BLOCKS.filter(block=>!ACCEPTED_PORTABLE_RELEASES.includes(block)).filter(block=>!WORKSPACE_BLOCKS.some(current=>current.manifest.id===block.manifest.id&&current.manifest.version===block.manifest.version))];
+export const DISCOVERABLE_BLOCKS = [STARTING_CHAT_BLOCK,...WORKSPACE_BLOCKS,...ACCEPTED_PORTABLE_RELEASES,...DISCOVERED_AS_HOST.values(),...DISCOVERABLE_SDK_BUILTIN_BLOCKS.filter(block=>!ACCEPTED_PORTABLE_RELEASES.includes(block)).filter(block=>!WORKSPACE_BLOCKS.some(current=>current.manifest.id===block.manifest.id&&current.manifest.version===block.manifest.version))].filter(block=>!isHiddenBlock(block));
 // Planners pin a finished file to a Block's output port, which the Editor alias has
 // none of, so planning keeps the newest render-only release in its place. Chat
 // builds then fold it into the Editor (compact-project.js), so people still get
@@ -179,7 +188,7 @@ const PRIOR_CURRENT_TYPES = currentBuiltinTypes('1.13.0','2.2.3',SCRIPT_WRITER_B
 const PREVIOUS_PORTABLE_TYPES=currentBuiltinTypes('1.14.0','2.2.4',SCRIPT_WRITER_BLOCK.manifest.version,{'blueprint':'2.1.8','panel-strip':'2.3.6','board-editor':'2.2.9','animated-scene':'2.3.7','editor':'2.2.8'});
 // 1.16.0: every built-in type ends in the original Editor (1.0), the full video editor.
 const PORTABLE_EDITOR_TYPES=currentBuiltinTypes('1.15.0','2.2.4','2.1.4',{'voiceover':'2.1.4','shot-plan':'2.1.3','blueprint':'2.1.9','panel-strip':'2.3.7','board-editor':'2.2.10','animated-scene':'2.3.8','editor':'2.2.9'});
-export const CURRENT_BUILTIN_TYPES = [...currentBuiltinTypes('1.16.0','2.2.4','2.1.4',{'voiceover':'2.1.4','shot-plan':'2.1.3','blueprint':'2.1.9','panel-strip':'2.3.7','board-editor':'2.2.10','animated-scene':'2.3.8','editor':'1.0.0'}),...REVENUE_REVIEW_PROJECT_TYPES,PRODUCT_AD_VARIANTS_PROJECT_TYPE,...FIRST_REVENUE_PROJECT_TYPES];
+export const CURRENT_BUILTIN_TYPES = [...currentBuiltinTypes('1.16.0','2.2.4','2.1.4',{'voiceover':'2.1.4','shot-plan':'2.1.3','blueprint':'2.1.9','panel-strip':'2.3.7','board-editor':'2.2.10','animated-scene':'2.3.8','editor':'1.0.0'}),...REVENUE_REVIEW_PROJECT_TYPES,PRODUCT_AD_VARIANTS_PROJECT_TYPE,...FIRST_REVENUE_PROJECT_TYPES,DEALER_INVENTORY_VIDEO_PROJECT_TYPE];
 const HISTORICAL_CURRENT_TYPES=[...PORTABLE_EDITOR_TYPES,PRODUCT_AD_VARIANTS_PROJECT_TYPE_1_0_3,PRIOR_PRODUCT_AD_VARIANTS_PROJECT_TYPE,PREVIOUS_PRODUCT_AD_VARIANTS_PROJECT_TYPE,...PREVIOUS_PORTABLE_TYPES,...PRIOR_CURRENT_TYPES,...SHARED_WORKSPACE_TYPES,...SHARED_CANVAS_TYPES,...SHARED_BLUEPRINT_TYPES,...PRIOR_SHARED_TYPES,...MEDIA_LIBRARY_TYPES,...EDITOR_AUDIO_TYPES,...PLAYABLE_EDITOR_TYPES,...ADVANCED_PORTABLE_TYPES,...PORTABLE_MVP_TYPES,...PRE_PROMOTION_CURRENT_TYPES,...PREVIOUS_BUILTIN_TYPES.filter(type=>flows[type.legacyMode].includes('shot-plan')),...currentBuiltinTypes('1.1.0','1.1.0','1.1.0',PRIOR_HOST_WORKSPACE_VERSIONS)];
 export const BUILTIN_TYPES = [...CURRENT_BUILTIN_TYPES,...HISTORICAL_CURRENT_TYPES,...LEGACY_TYPES];
 export const workspaceBlock = (id,version)=>DISCOVERABLE_BLOCKS.find(block=>block.manifest.id===id && (!version || block.manifest.version===version));

package/packages/block-platform/dealer-inventory-video-project-type.js

@@ -0,0 +1,33 @@
+// Dealer Inventory Video (October 20, 2026): one vehicle listing and its photos
+// become a narrated inventory video in two Steps after Chat. Chat gathers the
+// facts into Narration's brief; Narration writes the words and voices them (one
+// Block, two hosted operations); the photos are cut to the words in one Video
+// Step made of Import media, Shots and Export video. Each release is pinned:
+// adopt a newer Block in a new Type version, never by editing this one.
+import narration from '../../blocks/narration/versions/1.0.0/package.js';
+import mediaImport from '../../blocks/native/sm.import-media/versions/2.0.2/package.js';
+import shots from '../../blocks/native/sm.shot-plan/versions/2.2.1/package.js';
+import exportVideo from '../../blocks/native/sm.export-video/versions/2.1.0/package.js';
+
+const description='Turn one vehicle listing and its photos into a narrated inventory video: Chat gathers the facts, Narration writes and voices them, and the photos are cut to the words.';
+export const DEALER_INVENTORY_VIDEO_PROJECT_TYPE=Object.freeze({
+ schemaVersion:1,id:'stillmade.dealer-inventory-video',version:'1.0.0',name:'Dealer Inventory Video',description,license:'MIT',startingChat:'native',
+ summary:{text:description,origin:'human',generation:'authored',status:'ready'},
+ defaults:{aspectRatio:'16:9',brief:'Tell Chat the vehicle: year, make, model and trim, price, mileage, the features worth saying, the dealership name and how to reach it. Narration writes the words from those facts only and reads them in the voice you pick, or uses your own recording. Import the vehicle photos, check the shots, and make the video.'},
+ onboarding:[],
+ packages:[narration,mediaImport,shots,exportVideo].map(pkg=>structuredClone(pkg)),
+ stages:[
+  {id:'narration',blockId:narration.manifest.id,version:narration.manifest.version,label:'Narration'},
+  {id:'photos',blockId:mediaImport.manifest.id,version:mediaImport.manifest.version,label:'Vehicle photos',config:{include:'Images',duplicates:'Remove duplicates'}},
+  {id:'shots',blockId:shots.manifest.id,version:shots.manifest.version,label:'Shots'},
+  {id:'video',blockId:exportVideo.manifest.id,version:exportVideo.manifest.version,label:'Video'},
+ ],
+ connections:[
+  {from:{stage:'narration',port:'script'},to:{stage:'shots',port:'narrationScript'}},
+  {from:{stage:'photos',port:'assets'},to:{stage:'video',port:'media'}},
+  {from:{stage:'narration',port:'audio'},to:{stage:'video',port:'narration'}},
+ ],
+ // Photos, shots and the render are one Step a person opens: the video.
+ groups:[{id:'make-video',label:'Video',stages:['photos','shots','video'],result:{stage:'video',port:'output'}}],
+ outcome:{type:'export',dedupe:'material_project_state',minimumDurationSec:5},
+});

package/packages/block-platform/plain-descriptions.js

@@ -3,6 +3,7 @@
 // immutable, so the plain wording for first-party Blocks lives here, by Block id.
 // A Block whose own description is already plain needs no entry.
 export const PLAIN_BLOCK_DESCRIPTIONS=Object.freeze({
+ 'stillmade.narration':'Turn the facts from Chat into a script, hear it in a catalog voice or use your own recording, and pass the script and the voiceover on.',
  'stillmade.screen-recorder':'Record your screen or a window, keep it on your device, cut out the parts you do not want, and pass it on.',
  'sm.script':'Write and edit a script with AI. Set a length, add notes, and go back to earlier versions.',
  'sm.shot-plan':'Turn a script into a list of timed shots, then edit what each shot shows and how long it lasts.',

package/packages/block-sdk/builder-contract.js

@@ -37,6 +37,9 @@ const SECTIONS=Object.freeze([
  rule('reuse-first','both',
   'Reuse before building: use, remix or chain an existing Block when one fits; build only what is missing.',
   'Before building, check what already exists (`find_existing_blocks` over MCP, or the Marketplace and your library) by the inputs, results and operations the goal needs. Use an installed or reviewed Block that already does it; remix a close one so its license, notices and creator credit stay attached; chain existing Blocks and build only the missing step. Never republish another creator\'s source without remix lineage: public copies are refused. Build a new Block when nothing fits or the person asks for their own version, and say which similar Blocks you considered.'),
+ rule('block-tier','both',
+  'Three sizes: an app a person works in, a job that makes one deliverable from the hosted operations it needs (what Chat picks), an ingredient (one hosted operation) that only a job is made of.',
+  'Blocks come in three sizes and the manifest decides which (packages/block-sdk/block-tier.js): an app is a workspace a person works in (Editor, Canvas, Shots), placed in a Type and never wired automatically; a job is one deliverable a person would name (the narration, the captioned clip), built from the hosted operations it needs (`permissions.capabilities`) and reviewed in one place, the unit Chat picks for a Step; an ingredient is one hosted operation with nothing of its own (a declarative capability Block), what a job is made of. When two ingredients would stand in a row to make one deliverable (writing the words, then voicing them), build or pick the job that does both and keep the review point inside it. A job declares a second output when another Block consumes the intermediate (the script beside the voice); split into two jobs only when the intermediate has a life of its own or the halves have different owners or payment.'),
  rule('block-scope','both',
   'One Step per job: start one only where a person works with the result, where finding new items turns into handling each, or where the result leaves StillMade; all else is a part.',
   'A Step is one job: the work between two moments where a person or the outside world must see the result. Start a new Step only at one of three points; everything else is a part of the neighboring Step.\n\n1. **A person works with the result**: reads, edits, picks or approves it (a workspace Block such as a script, a Canvas or an Editor, or an approval). That is why Chat, Bible, Canvas and Editor are four Steps.\n2. **Finding new things turns into handling each one**: the trigger (a schedule or an app event), the app read, its filter and "only new" are the first job; what is done with each item is the next job. A trigger is a setting of the first job, never a Step of its own.\n3. **The result leaves StillMade**: it is sent, posted, published, paid or written into another app. Consecutive writes to the same app, with the glue that shapes data for them, are one job.\n\nIn a production the Steps are the workspaces a person opens: work feeding the next workspace is its part, else it joins the one before; neighbouring workspaces with one main result type are one Step unless another part feeds the second. A video ends in the Editor (1.0), which has captions and export built in, so Export video is never a Step beside it.\n\nA part that only runs in the desktop app cannot share a Step with cloud parts. Before adding a Step, name which of the three reasons makes it separate; if none applies, make it a part of a neighbor. A Step nobody would ever open must not exist on its own. Prefer an app task\'s own filter (a Gmail query such as `has:attachment filename:png`) to an AI check, and use AI decide only for judgement.\n\nInside one job, each capability stays its own part: a capability Block performs exactly one hosted operation and a connector one app task, so every part keeps its own permission, approval and credit rules, and StillMade groups the parts of one job into one Step (`groups` in the Project Type). Never invent a combined runtime. When one Block can do the whole job with documented primitives (a JavaScript Block doing several local transforms, a workspace owning its whole document), build it as one Block.\n\nExamples: "every new email with an image becomes a generated image" is two Steps, "Gmail · New emails with images" (When, fetch with an image filter, only new) and "Image from email" (AI write, Generate image); listing When, Fetch, Only new, AI decide, Continue only if, AI write and Generate image as seven Steps splits one job into its parts. "A new Meta lead goes to HubSpot" is three Steps: "Meta Ads · New leads", "Qualify lead" and "HubSpot · Add contact".'),
@@ -133,7 +136,7 @@ export const BUILDER_CONTRACT=Object.freeze({
  gapClasses:GAP_CLASSES,
 });
 
-const SECTION_TITLES=Object.freeze({'grounded-text':'Only supplied facts','source-of-truth':'Source of truth','reuse-first':'Reuse first','block-scope':'One job per Step','capability-contract':'Define the capability first','feature-map':'Feature map','compose':'Blocks compose','platform-primitives':'Use platform primitives','no-workarounds':'No hidden workarounds','naming':'Name it briefly','ui':'Interface','multiplayer':'Shared editing','external-services':'External services','dependencies':'Dependencies','security':'Security','lifecycle':'Execution lifecycle','errors':'Useful failures','adapt-to-platform':'Adapt to the platform','verification':'What StillMade verifies','project-types':'Project Types','readiness-report':'Readiness report'});
+const SECTION_TITLES=Object.freeze({'grounded-text':'Only supplied facts','source-of-truth':'Source of truth','reuse-first':'Reuse first','block-tier':'Three sizes of Block','block-scope':'One job per Step','capability-contract':'Define the capability first','feature-map':'Feature map','compose':'Blocks compose','platform-primitives':'Use platform primitives','no-workarounds':'No hidden workarounds','naming':'Name it briefly','ui':'Interface','multiplayer':'Shared editing','external-services':'External services','dependencies':'Dependencies','security':'Security','lifecycle':'Execution lifecycle','errors':'Useful failures','adapt-to-platform':'Adapt to the platform','verification':'What StillMade verifies','project-types':'Project Types','readiness-report':'Readiness report'});
 const inScope=(scope,wanted)=>wanted==='all'||scope==='both'||scope===wanted;
 
 /** Render the contract for a model prompt ('compact'), a guide ('full') or an SDK folder ('agents-md'). */

package/packages/block-sdk/first-party-identities.js

@@ -175,6 +175,7 @@ export const FIRST_PARTY_SDK_IDENTITIES=Object.freeze(new Set([
  "sm.whiteboard-assistant@1.0.0",
  "sm.write-summary@1.0.0",
  "sm.youtube@2.0.0",
+ "stillmade.narration@1.0.0",
  "stillmade.occasion-story@1.0.0",
  "stillmade.occasion-story@1.0.1",
  "stillmade.occasion-story@1.0.2",

package/packages/block-sdk/first-party-packages.js

@@ -3,6 +3,7 @@ import shortFormFinishV101 from '../../blocks/short-form-finish/versions/1.0.1/p
 import shortFormFinishV102 from '../../blocks/short-form-finish/versions/1.0.2/package.js';
 import shortFormFinish from '../../blocks/short-form-finish/package.js';
 import screenRecorder from '../../blocks/screen-recorder/package.js';
+import narration from '../../blocks/narration/package.js';
 import occasionStoryV100 from '../../blocks/occasion-story/versions/1.0.0/package.js';
 import releaseVisualsV100 from '../../blocks/release-visuals/versions/1.0.0/package.js';
 import occasionStoryV101 from '../../blocks/occasion-story/versions/1.0.1/package.js';
@@ -190,5 +191,5 @@ import pickPhotos from '../../blocks/native/sm.pick-photos/versions/1.0.0/packag
 // Exact, independently executable first-party releases. Host workspaces do not
 // belong here. Changing implementation requires a new immutable version.
 const freeze=value=>{if(value&&typeof value==='object'&&!Object.isFrozen(value)){Object.values(value).forEach(freeze);Object.freeze(value);}return value;};
-export const FIRST_PARTY_SDK_PACKAGES = Object.freeze([freeze(productAdVariants),freeze(pickPhotos),freeze(photoNotes),freeze(youtubePublication),freeze(stockSearch),freeze(exportVideoV210),freeze(exportVideo),freeze(exportAudio),freeze(motionGraphics),freeze(audioScore),freeze(shortFormFinish),freeze(screenRecorder),freeze(shortFormFinishV102),freeze(shortFormFinishV101),freeze(shortFormFinishV100),freeze(occasionStory),freeze(occasionStoryV101),freeze(occasionStoryV100),freeze(releaseVisuals),freeze(releaseVisualsV101),freeze(releaseVisualsV100),freeze(photoReelComposer),freeze(photoReelComposerV101),freeze(photoReelComposerV100),freeze(importMediaV202),freeze(importMediaV201),freeze(editorV2212),freeze(editorV2211),freeze(editorV2210),freeze(editorV229),freeze(editorV228),freeze(panelStripV241),freeze(panelStripV240),freeze(panelStripV237),freeze(panelStripV236),freeze(boardEditorV2210),freeze(boardEditorV229),freeze(animatedSceneV238),freeze(animatedSceneV237),freeze(pipelineV225),freeze(pipelineV224),freeze(blueprintV219),freeze(blueprintV218),freeze(videoAssetsV214),freeze(videoAssetsV213),freeze(chatV203),freeze(chatV202),freeze(chatV201),freeze(shotPlanV221),freeze(shotPlanV220),freeze(shotPlanV213),freeze(shotPlanV212),freeze(voiceoverV216),freeze(voiceoverV215),freeze(voiceoverV214),freeze(voiceoverV213),freeze(scriptV215),freeze(scriptV214),freeze(scriptV213),freeze(roughCutV202),freeze(roughCutV201),freeze(finalEditV202),freeze(finalEditV201),freeze(editAssistantV202),freeze(editAssistantV201),freeze(gradeV202),freeze(gradeV201),freeze(transitionV202),freeze(transitionV201),freeze(qualityAuditV102),freeze(qualityAuditV101),freeze(compareV202),freeze(compareV201),freeze(compare),freeze(grade),freeze(transition),freeze(exportTimeline),freeze(captions),freeze(importMedia),freeze(generateImageV210),freeze(generateImage),freeze(thumbnailV201),freeze(thumbnail),freeze(writeSummary),freeze(automationWhen),freeze(automationNewItems),freeze(automationAiDecide),freeze(automationContinueIf),freeze(connectApp),freeze(automationContactFields),freeze(automationAiWrite),freeze(automationMetaCreative),freeze(voiceover),freeze(voiceoverV210),freeze(voiceoverV211),freeze(voiceoverV212),freeze(script),freeze(scriptV210),freeze(scriptV211),freeze(scriptV212),freeze(generateVideoV201),freeze(generateVideo),freeze(chat),freeze(characterV201),freeze(character),freeze(locationV201),freeze(location),freeze(styleV201),freeze(style),freeze(researchV202),freeze(researchV201),freeze(research),freeze(imageEditorV201),freeze(imageEditor),freeze(describeMediaV201),freeze(describeMedia),freeze(videoAssets),freeze(videoAssetsV210),freeze(videoAssetsV211),freeze(videoAssetsV212),freeze(roughCut),freeze(finalEdit),freeze(editAssistant),freeze(transcribeV201),freeze(transcribe),freeze(blueprint),freeze(blueprintV210),freeze(blueprintV211),freeze(blueprintV212),freeze(blueprintV213),freeze(blueprintV214),freeze(blueprintV215),freeze(blueprintV216),freeze(blueprintV217),freeze(shotPlan),freeze(shotPlanV210),freeze(shotPlanV211),freeze(boardEditor),freeze(boardEditorV210),freeze(boardEditorV220),freeze(boardEditorV221),freeze(boardEditorV222),freeze(boardEditorV223),freeze(boardEditorV224),freeze(boardEditorV225),freeze(boardEditorV226),freeze(boardEditorV227),freeze(boardEditorV228),freeze(panelStripV200),freeze(panelStrip),freeze(panelStripV220),freeze(panelStripV230),freeze(panelStripV231),freeze(panelStripV232),freeze(panelStripV233),freeze(panelStripV234),freeze(panelStripV235),freeze(animatedSceneV200),freeze(animatedScene),freeze(animatedSceneV220),freeze(animatedSceneV230),freeze(animatedSceneV231),freeze(animatedSceneV232),freeze(animatedSceneV233),freeze(animatedSceneV234),freeze(animatedSceneV235),freeze(animatedSceneV236),freeze(editor),freeze(editorV210),freeze(editorV220),freeze(editorV221),freeze(editorV222),freeze(editorV223),freeze(editorV224),freeze(editorV225),freeze(editorV226),freeze(editorV227),freeze(pipelineV200),freeze(pipeline),freeze(pipelineV220),freeze(pipelineV221),freeze(pipelineV223),freeze(pipelineV222),freeze(shotPlanAssistant),freeze(animatedSceneAssistant),freeze(blueprintAssistant),freeze(whiteboardAssistant),freeze(qualityAudit)]);
+export const FIRST_PARTY_SDK_PACKAGES = Object.freeze([freeze(productAdVariants),freeze(pickPhotos),freeze(photoNotes),freeze(youtubePublication),freeze(stockSearch),freeze(exportVideoV210),freeze(exportVideo),freeze(exportAudio),freeze(motionGraphics),freeze(audioScore),freeze(shortFormFinish),freeze(screenRecorder),freeze(narration),freeze(shortFormFinishV102),freeze(shortFormFinishV101),freeze(shortFormFinishV100),freeze(occasionStory),freeze(occasionStoryV101),freeze(occasionStoryV100),freeze(releaseVisuals),freeze(releaseVisualsV101),freeze(releaseVisualsV100),freeze(photoReelComposer),freeze(photoReelComposerV101),freeze(photoReelComposerV100),freeze(importMediaV202),freeze(importMediaV201),freeze(editorV2212),freeze(editorV2211),freeze(editorV2210),freeze(editorV229),freeze(editorV228),freeze(panelStripV241),freeze(panelStripV240),freeze(panelStripV237),freeze(panelStripV236),freeze(boardEditorV2210),freeze(boardEditorV229),freeze(animatedSceneV238),freeze(animatedSceneV237),freeze(pipelineV225),freeze(pipelineV224),freeze(blueprintV219),freeze(blueprintV218),freeze(videoAssetsV214),freeze(videoAssetsV213),freeze(chatV203),freeze(chatV202),freeze(chatV201),freeze(shotPlanV221),freeze(shotPlanV220),freeze(shotPlanV213),freeze(shotPlanV212),freeze(voiceoverV216),freeze(voiceoverV215),freeze(voiceoverV214),freeze(voiceoverV213),freeze(scriptV215),freeze(scriptV214),freeze(scriptV213),freeze(roughCutV202),freeze(roughCutV201),freeze(finalEditV202),freeze(finalEditV201),freeze(editAssistantV202),freeze(editAssistantV201),freeze(gradeV202),freeze(gradeV201),freeze(transitionV202),freeze(transitionV201),freeze(qualityAuditV102),freeze(qualityAuditV101),freeze(compareV202),freeze(compareV201),freeze(compare),freeze(grade),freeze(transition),freeze(exportTimeline),freeze(captions),freeze(importMedia),freeze(generateImageV210),freeze(generateImage),freeze(thumbnailV201),freeze(thumbnail),freeze(writeSummary),freeze(automationWhen),freeze(automationNewItems),freeze(automationAiDecide),freeze(automationContinueIf),freeze(connectApp),freeze(automationContactFields),freeze(automationAiWrite),freeze(automationMetaCreative),freeze(voiceover),freeze(voiceoverV210),freeze(voiceoverV211),freeze(voiceoverV212),freeze(script),freeze(scriptV210),freeze(scriptV211),freeze(scriptV212),freeze(generateVideoV201),freeze(generateVideo),freeze(chat),freeze(characterV201),freeze(character),freeze(locationV201),freeze(location),freeze(styleV201),freeze(style),freeze(researchV202),freeze(researchV201),freeze(research),freeze(imageEditorV201),freeze(imageEditor),freeze(describeMediaV201),freeze(describeMedia),freeze(videoAssets),freeze(videoAssetsV210),freeze(videoAssetsV211),freeze(videoAssetsV212),freeze(roughCut),freeze(finalEdit),freeze(editAssistant),freeze(transcribeV201),freeze(transcribe),freeze(blueprint),freeze(blueprintV210),freeze(blueprintV211),freeze(blueprintV212),freeze(blueprintV213),freeze(blueprintV214),freeze(blueprintV215),freeze(blueprintV216),freeze(blueprintV217),freeze(shotPlan),freeze(shotPlanV210),freeze(shotPlanV211),freeze(boardEditor),freeze(boardEditorV210),freeze(boardEditorV220),freeze(boardEditorV221),freeze(boardEditorV222),freeze(boardEditorV223),freeze(boardEditorV224),freeze(boardEditorV225),freeze(boardEditorV226),freeze(boardEditorV227),freeze(boardEditorV228),freeze(panelStripV200),freeze(panelStrip),freeze(panelStripV220),freeze(panelStripV230),freeze(panelStripV231),freeze(panelStripV232),freeze(panelStripV233),freeze(panelStripV234),freeze(panelStripV235),freeze(animatedSceneV200),freeze(animatedScene),freeze(animatedSceneV220),freeze(animatedSceneV230),freeze(animatedSceneV231),freeze(animatedSceneV232),freeze(animatedSceneV233),freeze(animatedSceneV234),freeze(animatedSceneV235),freeze(animatedSceneV236),freeze(editor),freeze(editorV210),freeze(editorV220),freeze(editorV221),freeze(editorV222),freeze(editorV223),freeze(editorV224),freeze(editorV225),freeze(editorV226),freeze(editorV227),freeze(pipelineV200),freeze(pipeline),freeze(pipelineV220),freeze(pipelineV221),freeze(pipelineV223),freeze(pipelineV222),freeze(shotPlanAssistant),freeze(animatedSceneAssistant),freeze(blueprintAssistant),freeze(whiteboardAssistant),freeze(qualityAudit)]);
 export const firstPartySdkPackage = manifest => FIRST_PARTY_SDK_PACKAGES.find(pkg => pkg.manifest.id === manifest?.id && pkg.manifest.version === manifest?.version);

package/packages/block-sdk/local-admission.js

@@ -7,8 +7,20 @@ import {requiresDesktopExecution} from './desktop-execution.js';
 
 // Shared by external portable packaging and managed import. Repository evidence,
 // account permissions and current quarantine are additional host-side checks.
-export async function admitLocalPackage(pkg,{timeoutMs=15000}={}){
- assert(['recipe','javascript','capability','comfyui'].includes(pkg?.manifest?.runtime),'RUNTIME_RESTRICTED','Local admission supports recipes, isolated JavaScript, declarative capabilities and ComfyUI workflows. Hosted execution still requires account review.');
+// A module Block's files (October 20, 2026): the folder's files when the caller has
+// them, else the text a repo-shipped package carries beside its descriptor.
+function moduleFilesOf(pkg,files){
+ if(files&&typeof files==='object'&&Object.keys(files).length)return files;
+ if(pkg?.moduleSource&&typeof pkg.moduleSource==='object')return Object.fromEntries(Object.entries(pkg.moduleSource).map(([path,text])=>[path,new TextEncoder().encode(String(text))]));
+ return null;
+}
+// Running a module here means running its code in a Node worker, which is no
+// isolation boundary. Only a caller that owns the code asks for it: the SDK CLI
+// on the creator's own machine (`moduleExecution:true`), never a server path
+// admitting someone else's upload (imports, AI authoring, readiness from the API).
+export async function admitLocalPackage(pkg,{timeoutMs=15000,files,moduleExecution=false}={}){
+ const moduleFiles=moduleExecution===true&&pkg?.manifest?.runtime==='module'?moduleFilesOf(pkg,files):null;
+ assert(['recipe','javascript','capability','comfyui'].includes(pkg?.manifest?.runtime)||moduleFiles,'RUNTIME_RESTRICTED',pkg?.manifest?.runtime==='module'?'Local admission runs a module Block only on your own machine (the SDK CLI); StillMade runs it in the browser sandbox after review.':'Local admission supports recipes, isolated JavaScript, declarative capabilities and ComfyUI workflows. Hosted execution still requires account review.');
  assert(Number.isFinite(timeoutMs)&&timeoutMs>0&&timeoutMs<=15000,'TIMEOUT','Local admission needs a positive budget of at most 15 seconds');
  const deadline=Date.now()+timeoutMs,controller=new AbortController();
  const remaining=()=>{const value=deadline-Date.now();assert(value>0&&!controller.signal.aborted,'TIMEOUT','Local admission exceeded its shared budget');return value;};
@@ -20,11 +32,16 @@ export async function admitLocalPackage(pkg,{timeoutMs=15000}={}){
    remaining();
    return {...scan,digest:sourceDigest,platformChecks,execution:'not-run',liveVerified:false,reviewRequired:true,tests:0,fixtureContracts:scan.passed?pkg.tests.length:0};
   }
+  // A module runs in the SDK's own Node executor with the stand-in host answering its
+  // hosted calls, media and files; the digests are checked before anything runs.
+  // Loaded only for a module package: the Node executor needs worker threads, which the
+ // App's bundle (this file is part of it) must never pull in statically.
+ const module=moduleFiles?await (async()=>{const [{createNodeModuleExecutor},{createMockHost}]=await Promise.all([import('./module-node.js'),import('./mock-host.js')]);return createNodeModuleExecutor({files:moduleFiles,host:createMockHost({manifest:pkg.manifest}).host});})():undefined;
   const report=await admitPackage(pkg,{
-   test:content=>testPackage(content,{timeoutMs:remaining()}),
-   run:(content,input,options)=>{remaining();return runPackageAsync(content,input,{...options,signal:controller.signal});},
+   test:content=>testPackage(content,{timeoutMs:remaining(),...(module?{module}:{})}),
+   run:(content,input,options)=>{remaining();return runPackageAsync(content,input,{...options,signal:controller.signal,...(module?{module}:{})});},
   });
   remaining();
-  return report;
+  return module?{...report,execution:'local-stand-ins',liveVerified:false,reviewRequired:true}:report;
  }finally{clearTimeout(timer);}
 }

package/packages/block-sdk/testing.js

@@ -2,7 +2,7 @@ import {firstPartySdkPackage} from './first-party-packages.js';
 import {requiresDesktopExecution,validateDesktopExecution} from './desktop-execution.js';
 import {validatePortableMetadata} from './portable.js';
 import {initialBlockState,validateBlockState} from './state.js';
-import { assert, digest, safeDocument, stableStringify, validateManifest, validateValues } from './contracts.js';
+import { assert, digest, plain, safeDocument, stableStringify, validateManifest, validateValues } from './contracts.js';
 import { validateRecipe } from './recipe.js';
 import { validateJavaScript } from './javascript.js';
 import { runPackageAsync } from './runtime.js';
@@ -14,7 +14,7 @@ import {validateModuleDescriptor,MODULE_LIMITS} from './module-runtime.js';
 export function validatePackage(pkg) {
   safeDocument(pkg);
   if(pkg?.manifest?.runtime==='native-application')return validateNativeApplicationPackage(pkg);
-  assert(pkg && Object.keys(pkg).every(k => ['manifest', 'recipe', 'code', 'module', 'comfyui', 'capability', 'tests', 'view', 'portable', 'desktop'].includes(k)), 'PACKAGE', 'Unknown package field');
+  assert(pkg && Object.keys(pkg).every(k => ['manifest', 'recipe', 'code', 'module', 'moduleSource', 'comfyui', 'capability', 'tests', 'view', 'portable', 'desktop'].includes(k)), 'PACKAGE', 'Unknown package field');
   if(typeof pkg.manifest?.id==='string'&&pkg.manifest.id.startsWith('sm.'))assert(stableStringify(firstPartySdkPackage(pkg.manifest)??null)===stableStringify(pkg),'FIRST_PARTY_SOURCE','Use the exact published first-party package, or create a remix with a new identity.');
   const result = validateManifest(pkg.manifest);
   assert(result.valid, 'MANIFEST', JSON.stringify(result.errors));
@@ -32,8 +32,11 @@ export function validatePackage(pkg) {
     // Module files are named by digest; StillMade fetches and verifies the bytes before they run.
     assert(['code','recipe','comfyui','capability'].every(key=>!Object.hasOwn(pkg,key)),'PACKAGE','Module packages contain a module descriptor, not inline code, recipes, ComfyUI workflows or host requests');
     validateModuleDescriptor(pkg.module);
+    // A first-party package may carry its text files beside the descriptor so the app
+    // runs it without the content-addressed store; each is still checked against its digest.
+    if(Object.hasOwn(pkg,'moduleSource'))assert(plain(pkg.moduleSource)&&Object.entries(pkg.moduleSource).every(([path,text])=>typeof text==='string'&&Object.hasOwn(pkg.module.files,path)&&pkg.module.files[path].mediaType==='text/javascript'),'PACKAGE','moduleSource carries the text of files named in the module descriptor');
   }
-  else if (pkg.manifest.runtime === 'javascript') { assert(!Object.hasOwn(pkg,'comfyui')&&!Object.hasOwn(pkg,'capability')&&!Object.hasOwn(pkg,'module'),'PACKAGE','Only matching runtimes can contain ComfyUI workflows, host requests or module files'); validateJavaScript(pkg); }
+  else if (pkg.manifest.runtime === 'javascript') { assert(!Object.hasOwn(pkg,'comfyui')&&!Object.hasOwn(pkg,'capability')&&!Object.hasOwn(pkg,'module')&&!Object.hasOwn(pkg,'moduleSource'),'PACKAGE','Only matching runtimes can contain ComfyUI workflows, host requests or module files'); validateJavaScript(pkg); }
   else { assert(!Object.hasOwn(pkg, 'code')&&!Object.hasOwn(pkg,'comfyui')&&!Object.hasOwn(pkg,'capability')&&!Object.hasOwn(pkg,'module'), 'PACKAGE', 'Recipe packages cannot contain code, ComfyUI workflows or host requests'); validateRecipe(pkg.recipe); }
   if(pkg.view !== undefined)validateView(pkg.view);
   assert(Array.isArray(pkg.tests) && pkg.tests.length > 0 && pkg.tests.length <= 50, 'TESTS_REQUIRED', 'Include 1–50 fixture tests');