@civitai/sdk 0.20.0 → 0.20.1

package/README.md

@@ -1046,9 +1046,15 @@ Where it differs from the server on purpose:
 
 `fake.calls` records every request and answer. Options also cover smaller `limits`,
 `consent` (revoked scopes, or `'unavailable'`), `appStatus`, `disabled` and a custom
-`moderate`; by default the scanner refuses the words in `FAKE_STORAGE_MODERATION`. It
-does not model moderator hides or the review-preview namespace, and at the `Http`
-seam there is no URL resolution — the client refuses the segments a URL would
+`moderate`; by default the scanner refuses the words in `FAKE_STORAGE_MODERATION`.
+That default is the server's enforced moderation. The host picks each app's
+moderation mode for shared data, and enforce is not the default there: expect
+shadow (scanned after the write) or off, where neither a hit nor a scanner outage
+refuses a write. So never rely on a refusal to keep content out of shared data:
+a write the fake refuses may land on the server, and other viewers read it. Pass
+`moderate: () => null` to test what such an app sees. The fake does not model
+moderator hides or the review-preview namespace, and at the `Http` seam there is no
+URL resolution — the client refuses the segments a URL would
 rewrite (`''`, `.`, `..`) before sending.
 
 ### The legacy key/value stores

package/dist/doc-store/fake.js

@@ -22,6 +22,13 @@ import { createDocumentStorage } from './index.js';
  * versions of its own, so which ones a viewer owns is `FakeStorageViewer.modelVersions`
  * (default none).
  *
+ * Moderation is the server's ENFORCE mode, which the contract's moderation cases
+ * describe: a hit refuses `content_rejected` and a scanner outage
+ * `moderation_unavailable`. The host picks each app's shared-data moderation mode,
+ * and enforce is not its default: in `shadow` (the scan runs after the write) or `off`
+ * (no scan) neither a hit nor an outage refuses the write. The fake has no mode of its
+ * own: `moderate: () => null` is what a shadow or off app sees.
+ *
  * NOT MODELLED: moderator hides (a hidden document reads as not found on the server;
  * nothing here hides one), moderator exemption from the scanner, the review-preview
  * namespace, the token middleware's other refusals (revoked instance, context

package/dist/version.generated.d.ts

@@ -1,2 +1,2 @@
 /** This package's version, reported to the host as `sdkVersion` in `BLOCK_READY`. */
-export declare const VERSION = "0.20.0";
+export declare const VERSION = "0.20.1";

package/dist/version.generated.js

@@ -1,3 +1,3 @@
 /* AUTOGENERATED from package.json by scripts/gen-version.mjs. DO NOT EDIT. */
 /** This package's version, reported to the host as `sdkVersion` in `BLOCK_READY`. */
-export const VERSION = "0.20.0";
+export const VERSION = "0.20.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civitai/sdk",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "description": "The Civitai SDK: an app holds a token and calls the Civitai API and the orchestrator; a block asks its host only to show host UI.",
   "license": "MIT",
   "type": "module",