@crowdedkingdoms/crowdyjs 13.9.0 → 14.0.0

package/MIGRATION.md

@@ -1,3 +1,47 @@
+# CrowdyJS v14 — one endpoint (breaking)
+
+v13 made the two GraphQL origins optional-but-supported. v14 removes the second
+one entirely, because `cks-management-api` has been retired: the management
+surface is served by the unified API, and there is nothing else to point at.
+
+**What changed**
+
+- **`managementUrl` and `managementGraphqlEndpoint` removed** from
+  `CrowdyClientConfig`. Passing either now **throws** rather than being ignored —
+  a JavaScript caller that kept the old option would otherwise have its identity
+  calls silently redirected to `httpUrl`, or nowhere at all if `managementUrl`
+  was the only URL it set.
+- **`client.management` removed.** Use `client.graphql`; it reaches every
+  surface. `MarketplaceAPI` also collapsed from two transports to one.
+
+**What did not change:** the two-**token** model. An identity session token is
+still rejected for gameplay, and you still mint a short-lived app-scoped token
+per app. Keep using two clients — one per token — they just no longer need a
+shared management URL.
+
+**Upgrading**
+
+```diff
+ const client = createCrowdyClient({
+-  httpUrl: 'https://game.example.com',
+-  wsUrl: 'wss://game.example.com',
+-  managementUrl: 'https://management.example.com',
++  httpUrl: 'https://api.example.com/graphql',
++  wsUrl: 'wss://api.example.com/graphql',
+ });
+
+-await client.management.request(SomeDocument);
++await client.graphql.request(SomeDocument);
+```
+
+If you configured both to the same origin under v13, delete the `managementUrl`
+line and you are done.
+
+**One thing worth getting right:** the per-game client should use the
+`gameApiUrl` / `gameApiWsUrl` that `mintAppToken` returns, not a hardcoded host.
+An app lives in a single datacenter, and those fields name it. The identity
+client can stay on the shared origin.
+
 # CrowdyJS v13 — unified galaxy API (breaking)
 
 The platform merged the Management API and Game API into ONE server on the

package/README.md

@@ -39,11 +39,9 @@ import {
 } from '@crowdedkingdoms/crowdyjs';
 
 const client = createCrowdyClient({
-  // Game API (world data + UDP proxy)
-  httpUrl: 'https://game.example.com',
-  wsUrl: 'wss://game.example.com',
-  // Management API (passwordless sign-in, profile, admin)
-  managementUrl: 'https://management.example.com',
+  // One API: identity, studio admin, world data and the UDP proxy.
+  httpUrl: 'https://api.example.com/graphql',
+  wsUrl: 'wss://api.example.com/graphql',
   tokenStore: new BrowserLocalStorageTokenStore(),
   realtime: {
     retryAttempts: 8,
@@ -61,33 +59,34 @@ if (!client.session.getToken()) {
   // Or dev/test only (server has DEV_AUTH_BYPASS): client.auth.devLogin('player@example.com')
 }
 
-// Passwordless sign-in returns an identity SESSION token (Management API only);
+// Passwordless sign-in returns an identity SESSION token (rejected for gameplay);
 // the account is created on first sign-in. Identity reads run on it:
 const me = await client.users.me();
 console.log(me.email);
 ```
 
-The Management and Game APIs may share one origin or be split; if
-`managementUrl` is omitted, the SDK falls back to `httpUrl`.
+There is one endpoint. `managementUrl` was removed in v14 — see
+[MIGRATION.md](MIGRATION.md).
 
 **Gameplay needs an app-scoped token, not the session token.** Mint one per
-app and drive the Game API world/UDP surface from a per-game client — see
+app and drive the world/UDP surface from a per-game client — see
 [Authentication](#authentication-session-token-vs-app-scoped-tokens).
 
 ## Authentication: session token vs app-scoped tokens
 
-Passwordless sign-in returns an **identity session token** that works only
-against the Management API — account, studio admin, and token minting. Each
-game is entered with a short-lived **app-scoped token** confined to that one
-app, so a game stack never receives the player's full session.
+Passwordless sign-in returns an **identity session token** good for account,
+studio admin and token minting, and **rejected for gameplay**. Each game is
+entered with a short-lived **app-scoped token** confined to that one app, so a
+game stack never receives the player's full session.
 
 Use two clients: an Overworld/identity client (session token) and a per-game
-client (app token), sharing only the Management URL.
+client (app token). They never share a token store, and they need not share a
+URL — `mintAppToken` returns the endpoint for the app's own datacenter.
 
 ```ts
 // Overworld/identity client
 const overworld = createCrowdyClient({
-  managementUrl,
+  httpUrl: apiUrl,
   tokenStore: new BrowserLocalStorageTokenStore('crowdyjs:session'),
 });
 // Passwordless sign-in (magic link, social/OIDC, or dev bypass) yields the session token.
@@ -99,7 +98,6 @@ const t = await overworld.portal.mintAppToken(appId);
 const game = createCrowdyClient({
   httpUrl: t.gameApiUrl!,
   wsUrl: t.gameApiWsUrl!,
-  managementUrl,
   tokenStore: new BrowserLocalStorageTokenStore('crowdyjs:app:' + appId),
 });
 game.setToken(t.token);
@@ -158,7 +156,7 @@ lifecycle to preserve.
 
 1. Sign in (passwordless) on the identity client with `client.auth`, or
    restore a stored session with `client.session.restore()`. This yields the
-   **session token** (Management API only).
+   **session token**, which gameplay rejects.
 2. Mint an **app-scoped token** for the app (`identity.portal.mintAppToken(appId)`,
    or the PKCE portal flow across origins) and build a per-game client holding
    it (`game.setToken(token)`). The gameplay steps below run on that **game**
@@ -224,12 +222,11 @@ grouped under `client.admin` and mirrored at the top level):
 |---|---|
 | `client.operator` | Platform compute ceilings (`computePlatformCeilings`, `setComputePlatformCeilings`). Infrastructure operations live in the separate infra-control-plane service, not this SDK. |
 
-Auth, user reads, and the studio-admin / operator surfaces target
-`managementUrl` and use the **identity session token**; the game-client
-world/UDP surfaces target `httpUrl` / `wsUrl` and require an **app-scoped
-token** for that app.
+Auth, user reads and the studio-admin / operator surfaces use the **identity
+session token**; the world/UDP surfaces require an **app-scoped token** for that
+app. Both go to the same endpoint.
 
-CrowdyJS wraps the full public Management + Game API surface — every
+CrowdyJS wraps the full public API surface — every
 non-deprecated public root field has a typed method, with Relay `*Connection`
 cursor-pagination variants alongside the legacy offset lists. The SDK never
 relaxes server-side authorization: exposing an operation here just gives you a
@@ -241,7 +238,7 @@ not from an untrusted browser.
 
 `mintAppToken` returns `gameApiUrl` / `gameApiWsUrl`, so you rarely need a
 separate routing query. When you do (e.g. pre-flight discovery), query the
-app's routing fields on the Management API:
+app's routing fields:
 
 ```graphql
 query AppForRouting($appId: BigInt!) {
@@ -323,6 +320,45 @@ while `AUTH_REQUIRED` / `APP_ID_REQUIRED` must be fixed by the caller first.
 Unsubscribing stops delivery only; call `client.udp.disconnect()` to close the
 UDP proxy session.
 
+### Surviving the loss of an instance (direct connect)
+
+**If your environment uses direct connect, set `realtime.discoveryUrl`.** Under
+direct connect `mintAppToken` hands the client ONE api instance, and without a way
+to ask for another the client cannot leave it: it re-dials a dead host until its
+retries run out and then sits there, connected to nothing.
+
+```ts
+const bootstrap = await client.udp.gameClientBootstrap(appId);
+
+const client = createCrowdyClient({
+  httpUrl: bootstrap.gameApiUrl,
+  wsUrl: bootstrap.gameApiWsUrl,
+  realtime: {
+    // The LOAD BALANCER, not the instance above. A discovery URL that dies with
+    // the instance it exists to replace is worse than none.
+    discoveryUrl: bootstrap.discoveryUrl,
+  },
+});
+```
+
+That is the whole integration — the SDK builds re-discovery from the URL itself,
+so recovery does not depend on every game remembering to write a callback. Pass an
+explicit `realtime.rediscover` only to override it (e.g. `createMintRediscover`
+when you hold an identity client and would rather re-mint than reuse a token near
+expiry).
+
+**Requires 13.9.0 or later, and the version matters more than it looks.** Before
+13.9.0 the escalation to re-discovery was reachable only by a client that had
+NEVER connected: a session that was working and then lost its instance re-dialled
+one dead address forever, logging only `Binary relay socket error`. Setting
+`discoveryUrl` on an older build therefore changes nothing in the case you set it
+for. `ck-api` must be v1.20.0+ to return `discoveryUrl` at all.
+
+**Pass a `logger`.** Everything the SDK knows about losing an instance it says
+through that logger, including an explicit warning when it cannot move. With none
+wired, a client that failed to re-discover and one that never tried look
+identical.
+
 ## Spatial sends
 
 ```ts
@@ -671,8 +707,7 @@ The key parameter is optional and trailing, so it's safe to omit.
 ## Low-level GraphQL access
 
 Typed sub-client methods are first-class, but generated operation documents
-are also available through a transport escape hatch — `client.graphql` for the
-Game API and `client.management` for the Management API:
+are also available through a transport escape hatch, `client.graphql`:
 
 ```ts
 import { VersionInfoDocument } from '@crowdedkingdoms/crowdyjs/generated';
@@ -680,8 +715,9 @@ import { VersionInfoDocument } from '@crowdedkingdoms/crowdyjs/generated';
 const data = await client.graphql.request(VersionInfoDocument);
 ```
 
-For any brand-new server field not yet wrapped, `client.graphql.request(...)` /
-`client.management.request(...)` always works.
+For any brand-new server field not yet wrapped, `client.graphql.request(...)`
+always works. (`client.management` was removed in v14 along with the second
+endpoint; `client.graphql` reaches every surface.)
 
 ## Maintainers: schema artifacts and fixtures
 
@@ -689,20 +725,19 @@ CrowdyJS is a standalone public package: a clean clone builds with
 `npm install && npm run build` using the artifacts committed to this repo —
 no other repositories and no network access required:
 
-- `schema.gql` — merged Management API + Game API SDL.
+- `schema.gql` — the unified API SDL (management and game surfaces).
 - `src/generated/graphql.ts` — generated TypeScript operation types.
 
-Schema refresh is explicit, from the published SDLs
-([management-api.graphql](https://docs.crowdedkingdoms.com/schema/management-api.graphql),
-[game-api.graphql](https://docs.crowdedkingdoms.com/schema/game-api.graphql)):
+Schema refresh is explicit, from the published
+[SDL](https://docs.crowdedkingdoms.com/schema/game-api.graphql):
 
 ```bash
 npm run schema:sync:prod
 npm run codegen
 ```
 
-(`npm run schema:sync:paths -- --management <file-or-url> --game <file-or-url>`
-accepts explicit sources.) Commit `schema.gql` and `src/generated/graphql.ts`
+(`npm run schema:sync:paths -- --schema <file-or-url>` accepts an explicit
+source, and `npm run schema:sync:local` reads `../cks-game-api/schema.gql`.) Commit `schema.gql` and `src/generated/graphql.ts`
 together whenever the public GraphQL surface changes; `npm run check:schema`
 detects drift in CI/release work.
 

package/dist/binary-relay.d.ts

@@ -49,7 +49,7 @@ export interface BinaryRelayCallbacks {
  * than an unbalanced fleet.
  *
  * Compares the last two labels, so `ck-api-4.pgc.prod.cp.cks-env.com` and
- * `ck.pgc.prod.cp.cks-env.com` match, and `evil.example.com` does not.
+ * `ck.prod.cp.cks-env.com` match, and `evil.example.com` does not.
  */
 export declare function isSameEstate(current: string, candidate: string): boolean;
 export interface BinaryRelayConfig {

package/dist/binary-relay.js

@@ -38,7 +38,7 @@ const UNAVAILABLE_AFTER_RECONNECT_FAILURES = 3;
  * than an unbalanced fleet.
  *
  * Compares the last two labels, so `ck-api-4.pgc.prod.cp.cks-env.com` and
- * `ck.pgc.prod.cp.cks-env.com` match, and `evil.example.com` does not.
+ * `ck.prod.cp.cks-env.com` match, and `evil.example.com` does not.
  */
 export function isSameEstate(current, candidate) {
     const host = (raw) => {

package/dist/crowdy-client.d.ts

@@ -3,22 +3,22 @@
  * access everything via the typed sub-clients (`client.auth`, `client.udp`,
  * `client.chunks`, ...).
  *
- * The management/game-api split means CrowdyJS now talks to **two** GraphQL
- * endpoints behind the scenes:
+ * All sub-clients share ONE GraphQL endpoint: `httpUrl` / `graphqlEndpoint`, with
+ * `wsUrl` / `wsEndpoint` for subscriptions. Identity (`auth`, `users`, `portal`) and
+ * world/replication (`chunks`, `voxels`, `actors`, `udp`, ...) are surfaces of the
+ * same API, not separate services.
  *
- *   - `managementUrl` / `managementGraphqlEndpoint` -> `cks-management-api`
- *     used by `auth` (login, register, logout, password / email flows) and
- *     `users` (me, updateGamertag, deleteMyAccount). This is also where
- *     `game_tokens` are minted.
+ * BREAKING in v14: `managementUrl` and `managementGraphqlEndpoint` were removed,
+ * along with the `client.management` escape hatch, when `cks-management-api` was
+ * retired and its surface absorbed into the unified API. Set `httpUrl` and use
+ * `client.graphql`.
  *
- *   - `httpUrl` / `graphqlEndpoint` -> `cks-game-api`
- *     used by every game / world / replication sub-client
- *     (`chunks`, `voxels`, `actors`, `teleport`, `state`, `serverStatus`,
- *     `udp`). WebSocket subscriptions (`wsUrl`) also target this endpoint.
- *
- * A single `AuthState` is shared across both clients, so once
- * `client.auth.login()` returns, every subsequent SDK call (against either
- * endpoint) carries the Bearer token automatically.
+ * One `AuthState` backs the whole client, so once `client.auth` has a token every
+ * subsequent call carries it. Note that this is per-client by design: drive identity
+ * from a client holding the session token and gameplay from a per-app client holding
+ * that app's app-scoped token, because a session token is rejected for gameplay.
+ * Those two clients may point at different origins — an app lives in one datacenter,
+ * and `mintAppToken` returns its `gameApiUrl` / `gameApiWsUrl`.
  */
 import { AuthState } from './auth-state.js';
 import { GraphQLClient } from './client.js';
@@ -63,26 +63,17 @@ import { CrowdyAgentGraphQLTransport } from './crowdy-agent/graphql-transport.js
 import { PlayerWalletAPI } from './domains/playerWallet.js';
 import { MarketplaceAPI } from './domains/marketplace.js';
 import { PlayerModelAPI } from './domains/playerModel.js';
+import { DiscoveryDomain } from './domains/discovery.js';
 export interface CrowdyClientConfig {
-    /** game-api HTTP root (e.g. `https://dev-game-api.crowdedkingdoms.com`). */
+    /** HTTP root (e.g. `https://api.crowdedkingdoms.com`). */
     httpUrl?: string;
-    /** game-api WS root. */
+    /** WS root. */
     wsUrl?: string;
-    /** game-api GraphQL endpoint. Defaults to `${httpUrl}/graphql`. */
+    /** GraphQL endpoint. Defaults to `${httpUrl}/graphql`. */
     graphqlEndpoint?: string;
-    /** game-api WS endpoint. Defaults to `${wsUrl}/graphql`. */
+    /** WS endpoint. Defaults to `${wsUrl}/graphql`. */
     wsEndpoint?: string;
-    /**
-     * management-api HTTP root (e.g.
-     * `https://dev-management-api.crowdedkingdoms.com`). When set,
-     * `client.auth` and `client.users` route here. If left empty the SDK
-     * falls back to `httpUrl` for backwards-compatibility with the legacy
-     * single-endpoint deployment, but new code should set this explicitly.
-     */
-    managementUrl?: string;
-    /** management-api GraphQL endpoint. Defaults to `${managementUrl}/graphql`. */
-    managementGraphqlEndpoint?: string;
-    /** Per-request HTTP timeout in milliseconds (applies to both endpoints). */
+    /** Per-request HTTP timeout in milliseconds. */
     timeout?: number;
     /**
      * Persistence for the Bearer token across reloads. `BrowserLocalStorageTokenStore`
@@ -176,9 +167,9 @@ export interface CrowdyClientConfig {
 }
 export declare class CrowdyClient {
     private gameplayTokenRefresh;
-    /** Shared token state for both game-api and management-api requests. */
+    /** Shared token state for every request this client makes. */
     readonly session: AuthState;
-    /** game-api HTTP client. */
+    /** HTTP client for the API. */
     readonly graphql: GraphQLClient;
     /** game-api WebSocket subscription manager. */
     readonly realtime: SubscriptionManager;
@@ -191,8 +182,6 @@ export declare class CrowdyClient {
      * fields (not wire framing). See {@link RealtimeMetrics}.
      */
     readonly metrics: RealtimeMetrics;
-    /** management-api HTTP client. Same `AuthState` as `graphql`. */
-    readonly management: GraphQLClient;
     /** Auth + session: login, register, logout, password/email flows. */
     readonly auth: AuthAPI;
     /** Current-user identity: `me`, gamertag, account deletion. */
@@ -205,6 +194,12 @@ export declare class CrowdyClient {
      * app token.
      */
     readonly portal: PortalAPI;
+    /**
+     * Where each app lives. Unauthenticated, and meant to be called BEFORE login against
+     * the shared origin, so the session and the app token are both written in the app's
+     * own datacenter rather than wherever DNS happened to point.
+     */
+    readonly discovery: DiscoveryDomain;
     /** Public platform discovery (shared game-api URL, free app quota). */
     readonly platform: PlatformAPI;
     /** Organizations, members, RBAC roles, and org API tokens (studio admin). */
@@ -224,7 +219,7 @@ export declare class CrowdyClient {
     /** Operator (control-plane) surface — requires `is_operator`. */
     readonly operator: ControlPlaneAPI;
     /**
-     * Studio-admin facade grouping the privileged management sub-clients
+     * Studio-admin facade grouping the privileged management-surface sub-clients
      * (`organizations`, `appAccess`, `billing`, `payments`, `quotas`,
      * `usage`, `sharedEnvironment`, `grids`) under one namespace.
      */

package/dist/crowdy-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crowdy-client.d.ts","sourceRoot":"","sources":["../src/crowdy-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IAEjC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAGnC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,wEAAwE;IACxE,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,EAAE;QACT,4EAA4E;QAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iDAAiD;QACjD,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,8EAA8E;QAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,+EAA+E;QAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;WAGG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B;;;;;;;WAOG;QACH,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B;;;WAGG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;YAC7C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YACxB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SACvB,GAAG,IAAI,CAAC,CAAC;QACV;;;;;;;;;WASG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,iEAAiE;QACjE,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC,CAAC;IACF;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,oBAAoB,CAA0C;IAEtE,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,4BAA4B;IAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IAGnC,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;IACjD,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAGzB,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,gFAAgF;IAChF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,wEAAwE;IACxE,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;IAExD,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;gBAEnB,MAAM,GAAE,kBAAuB;IAiJ3C,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAIpC,0DAA0D;IAC1D,QAAQ,IAAI,MAAM,GAAG,IAAI;IAIzB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,oBAAoB,IAAI,OAAO,CAAC,gBAAgB,CAAC;YAczC,2BAA2B;IAczC;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW;IAIjC;;;;;;;;;;;;OAYG;IACH,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa;IAS3D,gEAAgE;IAChE,KAAK,IAAI,IAAI;CAKd;AAED,wBAAgB,kBAAkB,CAChC,MAAM,GAAE,kBAAuB,GAC9B,YAAY,CAEd"}
+{"version":3,"file":"crowdy-client.d.ts","sourceRoot":"","sources":["../src/crowdy-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IAEjC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,wEAAwE;IACxE,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,EAAE;QACT,4EAA4E;QAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iDAAiD;QACjD,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,8EAA8E;QAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,+EAA+E;QAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;WAGG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B;;;;;;;WAOG;QACH,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B;;;WAGG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;YAC7C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YACxB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SACvB,GAAG,IAAI,CAAC,CAAC;QACV;;;;;;;;;WASG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,iEAAiE;QACjE,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC,CAAC;IACF;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,oBAAoB,CAA0C;IAEtE,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,+BAA+B;IAC/B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAGlC,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;IACjD,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAGzB,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,gFAAgF;IAChF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,wEAAwE;IACxE,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;IAExD,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;gBAEnB,MAAM,GAAE,kBAAuB;IA+I3C,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAIpC,0DAA0D;IAC1D,QAAQ,IAAI,MAAM,GAAG,IAAI;IAIzB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,oBAAoB,IAAI,OAAO,CAAC,gBAAgB,CAAC;YAczC,2BAA2B;IAczC;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW;IAIjC;;;;;;;;;;;;OAYG;IACH,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa;IAS3D,gEAAgE;IAChE,KAAK,IAAI,IAAI;CAKd;AAED,wBAAgB,kBAAkB,CAChC,MAAM,GAAE,kBAAuB,GAC9B,YAAY,CAEd"}

package/dist/crowdy-client.js

@@ -3,22 +3,22 @@
  * access everything via the typed sub-clients (`client.auth`, `client.udp`,
  * `client.chunks`, ...).
  *
- * The management/game-api split means CrowdyJS now talks to **two** GraphQL
- * endpoints behind the scenes:
+ * All sub-clients share ONE GraphQL endpoint: `httpUrl` / `graphqlEndpoint`, with
+ * `wsUrl` / `wsEndpoint` for subscriptions. Identity (`auth`, `users`, `portal`) and
+ * world/replication (`chunks`, `voxels`, `actors`, `udp`, ...) are surfaces of the
+ * same API, not separate services.
  *
- *   - `managementUrl` / `managementGraphqlEndpoint` -> `cks-management-api`
- *     used by `auth` (login, register, logout, password / email flows) and
- *     `users` (me, updateGamertag, deleteMyAccount). This is also where
- *     `game_tokens` are minted.
+ * BREAKING in v14: `managementUrl` and `managementGraphqlEndpoint` were removed,
+ * along with the `client.management` escape hatch, when `cks-management-api` was
+ * retired and its surface absorbed into the unified API. Set `httpUrl` and use
+ * `client.graphql`.
  *
- *   - `httpUrl` / `graphqlEndpoint` -> `cks-game-api`
- *     used by every game / world / replication sub-client
- *     (`chunks`, `voxels`, `actors`, `teleport`, `state`, `serverStatus`,
- *     `udp`). WebSocket subscriptions (`wsUrl`) also target this endpoint.
- *
- * A single `AuthState` is shared across both clients, so once
- * `client.auth.login()` returns, every subsequent SDK call (against either
- * endpoint) carries the Bearer token automatically.
+ * One `AuthState` backs the whole client, so once `client.auth` has a token every
+ * subsequent call carries it. Note that this is per-client by design: drive identity
+ * from a client holding the session token and gameplay from a per-app client holding
+ * that app's app-scoped token, because a session token is rejected for gameplay.
+ * Those two clients may point at different origins — an app lives in one datacenter,
+ * and `mintAppToken` returns its `gameApiUrl` / `gameApiWsUrl`.
  */
 import { AuthState } from './auth-state.js';
 import { GraphQLClient } from './client.js';
@@ -63,9 +63,21 @@ import { CrowdyAgentGraphQLTransport } from './crowdy-agent/graphql-transport.js
 import { PlayerWalletAPI } from './domains/playerWallet.js';
 import { MarketplaceAPI } from './domains/marketplace.js';
 import { PlayerModelAPI } from './domains/playerModel.js';
+import { DiscoveryDomain } from './domains/discovery.js';
 export class CrowdyClient {
     constructor(config = {}) {
         this.gameplayTokenRefresh = null;
+        // TypeScript rejects these, JavaScript would not: a caller still passing
+        // managementUrl would have its identity calls silently sent to httpUrl, or
+        // nowhere at all if managementUrl was the only URL it set. Say so instead.
+        for (const removed of ['managementUrl', 'managementGraphqlEndpoint']) {
+            if (config[removed] !== undefined) {
+                throw new TypeError(`\`${removed}\` was removed in CrowdyJS v14: the management and game ` +
+                    `surfaces are one API at one endpoint. Pass \`httpUrl\` (and \`wsUrl\`) ` +
+                    `instead, and use \`client.graphql\` where you used \`client.management\`. ` +
+                    `Per-app gameplay endpoints come from mintAppToken's gameApiUrl/gameApiWsUrl.`);
+            }
+        }
         this.session = new AuthState(config.tokenStore);
         const lbCookieStore = config.lbCookieStore ?? new LbCookieStore();
         this.graphql = new GraphQLClient({
@@ -118,30 +130,20 @@ export class CrowdyClient {
                 }
                 : {}),
         }, this.session, this.metrics);
-        const managementGraphqlEndpoint = config.managementGraphqlEndpoint ??
-            toGraphqlEndpoint(config.managementUrl, 'graphql') ??
-            config.graphqlEndpoint;
-        // Management-api client. Falls back to game-api endpoint if the caller
-        // hasn't configured `managementUrl` yet (single-endpoint legacy mode).
-        this.management = new GraphQLClient({
-            httpUrl: config.managementUrl ?? config.httpUrl,
-            graphqlEndpoint: managementGraphqlEndpoint,
-            timeout: config.timeout,
-            logger: config.logger,
-        }, this.session);
-        this.auth = new AuthAPI(this.management, this.session);
-        this.users = new UsersAPI(this.management);
-        this.apps = new AppsAPI(this.management);
-        this.portal = new PortalAPI(this.management, this.session, config.pkceStore);
-        this.platform = new PlatformAPI(this.management);
-        this.organizations = new OrganizationsAPI(this.management);
-        this.appAccess = new AppAccessAPI(this.management);
-        this.billing = new BillingAPI(this.management);
-        this.payments = new PaymentsAPI(this.management);
-        this.quotas = new QuotasAPI(this.management);
-        this.usage = new UsageAPI(this.management);
-        this.sharedEnvironment = new SharedEnvironmentAPI(this.management);
-        this.operator = new ControlPlaneAPI(this.management);
+        this.auth = new AuthAPI(this.graphql, this.session);
+        this.users = new UsersAPI(this.graphql);
+        this.apps = new AppsAPI(this.graphql);
+        this.portal = new PortalAPI(this.graphql, this.session, config.pkceStore);
+        this.discovery = new DiscoveryDomain(this.graphql);
+        this.platform = new PlatformAPI(this.graphql);
+        this.organizations = new OrganizationsAPI(this.graphql);
+        this.appAccess = new AppAccessAPI(this.graphql);
+        this.billing = new BillingAPI(this.graphql);
+        this.payments = new PaymentsAPI(this.graphql);
+        this.quotas = new QuotasAPI(this.graphql);
+        this.usage = new UsageAPI(this.graphql);
+        this.sharedEnvironment = new SharedEnvironmentAPI(this.graphql);
+        this.operator = new ControlPlaneAPI(this.graphql);
         this.chunks = new ChunksAPI(this.graphql);
         this.voxels = new VoxelsAPI(this.graphql);
         this.actors = new ActorsAPI(this.graphql);
@@ -162,8 +164,8 @@ export class CrowdyClient {
             wsUrl: config.wsEndpoint ?? toGraphqlEndpoint(config.wsUrl, 'graphql'),
             getToken: () => this.session.getToken(),
         });
-        this.playerWallet = new PlayerWalletAPI(this.management);
-        this.marketplace = new MarketplaceAPI(this.graphql, this.management);
+        this.playerWallet = new PlayerWalletAPI(this.graphql);
+        this.marketplace = new MarketplaceAPI(this.graphql);
         this.playerModel = new PlayerModelAPI(this.graphql);
         this.avatars = new AvatarsAPI(this.graphql);
         this.host = new HostAPI(this.graphql);

package/dist/domains/appAccess.d.ts

@@ -4,7 +4,7 @@ import { type AppAccessTiersQuery, type MyAppAccessQuery, type AppUserAccessByAp
  * App access tiers + per-user access grants — exposed as `client.appAccess`
  * (and grouped under `client.admin`).
  *
- * Targets the **management-api**. Tiers define the runtime-permission bundles
+ * Part of the management surface. Tiers define the runtime-permission bundles
  * (`access`, `teleport`, `update_voxel_data`, `use_voice_chat`, ...) a player
  * gets; grants attach a user to a tier. New apps auto-provision an open default
  * tier, so most players need no explicit grant.
@@ -17,8 +17,8 @@ import { type AppAccessTiersQuery, type MyAppAccessQuery, type AppUserAccessByAp
  *   per the permission notes above.
  */
 export declare class AppAccessAPI {
-    private readonly management;
-    constructor(management: GraphQLClient);
+    private readonly api;
+    constructor(api: GraphQLClient);
     /**
      * List the access tiers defined for an app. **Public.**
      *

package/dist/domains/appAccess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"appAccess.d.ts","sourceRoot":"","sources":["../../src/domains/appAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAcL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,qCAAqC,EAC1C,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,aAAa;IAEtD;;;;;OAKG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAO1E;;;;;;OAMG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAKvE;;;;;;;;OAQG;IACG,UAAU,CACd,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9D,OAAO,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IAUzD;;;;;;;;;OASG;IACG,oBAAoB,CACxB,IAAI,EAAE,qCAAqC,GAC1C,OAAO,CAAC,4BAA4B,CAAC,yBAAyB,CAAC,CAAC;IAQnE;;;;;;OAMG;IACG,kBAAkB,IAAI,OAAO,CACjC,uBAAuB,CAAC,oBAAoB,CAAC,CAC9C;IAKD;;;;;;;OAOG;IACG,qBAAqB,CACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,6BAA6B,CAAC,0BAA0B,CAAC,CAAC;IAQrE;;;;;;;OAOG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;IAO5D;;;;;;OAMG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAOxD;;;;;;;OAOG;IACG,UAAU,CACd,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAOxD;;;;;;;OAOG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAQxD;;;;;;OAMG;IACG,WAAW,CACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;IAO1D;;;;;;;OAOG;IACG,KAAK,CACT,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IAOpD;;;;;;;OAOG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;CAOvD"}
+{"version":3,"file":"appAccess.d.ts","sourceRoot":"","sources":["../../src/domains/appAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAcL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,qCAAqC,EAC1C,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAE/C;;;;;OAKG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAO1E;;;;;;OAMG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAKvE;;;;;;;;OAQG;IACG,UAAU,CACd,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9D,OAAO,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IAUzD;;;;;;;;;OASG;IACG,oBAAoB,CACxB,IAAI,EAAE,qCAAqC,GAC1C,OAAO,CAAC,4BAA4B,CAAC,yBAAyB,CAAC,CAAC;IAQnE;;;;;;OAMG;IACG,kBAAkB,IAAI,OAAO,CACjC,uBAAuB,CAAC,oBAAoB,CAAC,CAC9C;IAKD;;;;;;;OAOG;IACG,qBAAqB,CACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,6BAA6B,CAAC,0BAA0B,CAAC,CAAC;IAQrE;;;;;;;OAOG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;IAO5D;;;;;;OAMG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAOxD;;;;;;;OAOG;IACG,UAAU,CACd,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAOxD;;;;;;;OAOG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAQxD;;;;;;OAMG;IACG,WAAW,CACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;IAO1D;;;;;;;OAOG;IACG,KAAK,CACT,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IAOpD;;;;;;;OAOG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;CAOvD"}