@civitai/sdk 0.14.0 → 0.14.1

package/BREAKING.md

@@ -204,8 +204,8 @@ bridge already called, so behaviour is identical on both transports.
 - **Anonymous viewers may NEVER write or vote.** An anon write is rejected by the write scope's own binding in
   `withBlockScope`, before the handler runs, so it surfaces as **`403`** rather than the handler's own `401`.
 - **Authenticated writers must clear a minimum-trust gate.** After the anon check, writes call
-  `assertSharedWriteTrust` — account age, paid tier, and verified email *or* a linked OAuth account. A signed-in
-  viewer is not automatically a permitted writer.
+  `assertSharedWriteTrust` — account age, completed onboarding, not banned or muted, and verified email *or* a
+  linked OAuth account. A signed-in viewer is not automatically a permitted writer.
 - **Tenancy is structural, not checked.** Every query interpolates a schema name derived from the **verified
   token**, never from client input. An app cannot address another app's shared storage because it cannot name it.
 - **Rate limits are per-operation and per-namespace**, so one operation cannot starve another — browsing a feed

package/README.md

@@ -336,7 +336,7 @@ every viewer reads and writes, unlike `app.storage`, which is private per viewer
 Five methods: `list`, `get`, `append`, `update`, `withdraw`.
 
 ```ts
-const { items, nextCursor } = await app.sharedStorage.list({ prefix: 'deck:' });
+const { items, nextCursor } = await app.sharedStorage.list({ limit: 20 }); // newest first
 const { key } = await app.sharedStorage.append({ title: 'My deck', data: { cards } });
 const row = await app.sharedStorage.get(key);        // null when hidden or absent
 await app.sharedStorage.update(key, { title: 'Renamed' });
@@ -362,9 +362,9 @@ other.** This is the opposite of `app.storage`, so do not carry that gate over:
   supported path — and may **never** write. An anon write is a `403` from the
   scope binding, not the `401` a missing token gives.
 - **A signed-in viewer is not automatically a permitted writer.** Writes clear a
-  server-side minimum-trust gate (account age, paid tier, verified email or a
-  linked OAuth account). Treat a write refusal as a normal outcome with a real
-  message in the UI, not an unexpected error.
+  server-side minimum-trust gate (account age, completed onboarding, verified
+  email or a linked OAuth account, not banned or muted). Treat a write refusal
+  as a normal outcome with a real message in the UI, not an unexpected error.
 
 So gate the write affordances on `app.viewer`, and render the reads regardless.
 
@@ -379,7 +379,9 @@ that type-checks:
   `app.storage`'s, absence proves the scan completed.
 - **`append` takes no key.** The server mints a ULID and returns it, so one
   viewer cannot overwrite another's row. Use `update` for an in-place edit of a
-  row this viewer authored.
+  row this viewer authored. It also means `list`'s `prefix` is no namespace of
+  yours: a prefix you choose (`'deck:'`) matches none of the rows `append`
+  creates. Put what you filter by in `data` and filter the page yourself.
 - **`value` is `unknown` on the way out.** The row was written by some other
   viewer's copy of your app, possibly an older version, so its shape is a fact
   about the data rather than a promise the client can make. Narrow it yourself.

package/dist/shared-storage/index.d.ts

@@ -51,7 +51,11 @@ export interface SharedItem {
     viewerVoted: boolean;
 }
 export interface SharedListQuery {
-    /** Narrows to keys starting with this. Escaped server-side against LIKE wildcards. */
+    /**
+     * Narrows to keys starting with this. Escaped server-side against LIKE wildcards.
+     * `append` mints every key as a ULID, so a prefix of your own choosing matches
+     * none of the rows it creates.
+     */
     prefix?: string;
     /** The server bounds this and applies its own default; this client sends none. */
     limit?: number;
@@ -94,8 +98,9 @@ export interface SharedListResult {
  *   write is refused by the scope binding before the handler runs, so it arrives
  *   as **403**, not the 401 a missing token gives.
  * - A signed-in viewer is not automatically a permitted writer: writes clear a
- *   minimum-trust gate (account age, paid tier, verified email or a linked OAuth
- *   account). Treat a write refusal as a normal outcome and say so in the UI.
+ *   minimum-trust gate (account age, completed onboarding, verified email or a
+ *   linked OAuth account, not banned or muted). Treat a write refusal as a
+ *   normal outcome and say so in the UI.
  *
  * 🔴 EVERY FAILURE REJECTS. No path here resolves to mean "not written" or
  * "could not read". A caller that must not act on a partial view branches on the

package/dist/version.generated.d.ts

@@ -1,2 +1,2 @@
 /** This package's version, reported to the host as `sdkVersion` in `BLOCK_READY`. */
-export declare const VERSION = "0.14.0";
+export declare const VERSION = "0.14.1";

package/dist/version.generated.js

@@ -1,3 +1,3 @@
 /* AUTOGENERATED from package.json by scripts/gen-version.mjs. DO NOT EDIT. */
 /** This package's version, reported to the host as `sdkVersion` in `BLOCK_READY`. */
-export const VERSION = "0.14.0";
+export const VERSION = "0.14.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civitai/sdk",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "description": "The Civitai SDK: an app holds a token and calls the Civitai API and the orchestrator; a block asks its host only to show host UI.",
   "license": "MIT",
   "type": "module",