@crowdedkingdoms/crowdyjs 13.9.0 → 14.1.0

package/dist/crowdy-client.js

@@ -3,22 +3,22 @@
  * access everything via the typed sub-clients (`client.auth`, `client.udp`,
  * `client.chunks`, ...).
  *
- * The management/game-api split means CrowdyJS now talks to **two** GraphQL
- * endpoints behind the scenes:
+ * All sub-clients share ONE GraphQL endpoint: `httpUrl` / `graphqlEndpoint`, with
+ * `wsUrl` / `wsEndpoint` for subscriptions. Identity (`auth`, `users`, `portal`) and
+ * world/replication (`chunks`, `voxels`, `actors`, `udp`, ...) are surfaces of the
+ * same API, not separate services.
  *
- *   - `managementUrl` / `managementGraphqlEndpoint` -> `cks-management-api`
- *     used by `auth` (login, register, logout, password / email flows) and
- *     `users` (me, updateGamertag, deleteMyAccount). This is also where
- *     `game_tokens` are minted.
+ * BREAKING in v14: `managementUrl` and `managementGraphqlEndpoint` were removed,
+ * along with the `client.management` escape hatch, when `cks-management-api` was
+ * retired and its surface absorbed into the unified API. Set `httpUrl` and use
+ * `client.graphql`.
  *
- *   - `httpUrl` / `graphqlEndpoint` -> `cks-game-api`
- *     used by every game / world / replication sub-client
- *     (`chunks`, `voxels`, `actors`, `teleport`, `state`, `serverStatus`,
- *     `udp`). WebSocket subscriptions (`wsUrl`) also target this endpoint.
- *
- * A single `AuthState` is shared across both clients, so once
- * `client.auth.login()` returns, every subsequent SDK call (against either
- * endpoint) carries the Bearer token automatically.
+ * One `AuthState` backs the whole client, so once `client.auth` has a token every
+ * subsequent call carries it. Note that this is per-client by design: drive identity
+ * from a client holding the session token and gameplay from a per-app client holding
+ * that app's app-scoped token, because a session token is rejected for gameplay.
+ * Those two clients may point at different origins — an app lives in one datacenter,
+ * and `mintAppToken` returns its `gameApiUrl` / `gameApiWsUrl`.
  */
 import { AuthState } from './auth-state.js';
 import { GraphQLClient } from './client.js';
@@ -63,9 +63,21 @@ import { CrowdyAgentGraphQLTransport } from './crowdy-agent/graphql-transport.js
 import { PlayerWalletAPI } from './domains/playerWallet.js';
 import { MarketplaceAPI } from './domains/marketplace.js';
 import { PlayerModelAPI } from './domains/playerModel.js';
+import { DiscoveryDomain } from './domains/discovery.js';
 export class CrowdyClient {
     constructor(config = {}) {
         this.gameplayTokenRefresh = null;
+        // TypeScript rejects these, JavaScript would not: a caller still passing
+        // managementUrl would have its identity calls silently sent to httpUrl, or
+        // nowhere at all if managementUrl was the only URL it set. Say so instead.
+        for (const removed of ['managementUrl', 'managementGraphqlEndpoint']) {
+            if (config[removed] !== undefined) {
+                throw new TypeError(`\`${removed}\` was removed in CrowdyJS v14: the management and game ` +
+                    `surfaces are one API at one endpoint. Pass \`httpUrl\` (and \`wsUrl\`) ` +
+                    `instead, and use \`client.graphql\` where you used \`client.management\`. ` +
+                    `Per-app gameplay endpoints come from mintAppToken's gameApiUrl/gameApiWsUrl.`);
+            }
+        }
         this.session = new AuthState(config.tokenStore);
         const lbCookieStore = config.lbCookieStore ?? new LbCookieStore();
         this.graphql = new GraphQLClient({
@@ -118,30 +130,45 @@ export class CrowdyClient {
                 }
                 : {}),
         }, this.session, this.metrics);
-        const managementGraphqlEndpoint = config.managementGraphqlEndpoint ??
-            toGraphqlEndpoint(config.managementUrl, 'graphql') ??
-            config.graphqlEndpoint;
-        // Management-api client. Falls back to game-api endpoint if the caller
-        // hasn't configured `managementUrl` yet (single-endpoint legacy mode).
-        this.management = new GraphQLClient({
-            httpUrl: config.managementUrl ?? config.httpUrl,
-            graphqlEndpoint: managementGraphqlEndpoint,
-            timeout: config.timeout,
-            logger: config.logger,
-        }, this.session);
-        this.auth = new AuthAPI(this.management, this.session);
-        this.users = new UsersAPI(this.management);
-        this.apps = new AppsAPI(this.management);
-        this.portal = new PortalAPI(this.management, this.session, config.pkceStore);
-        this.platform = new PlatformAPI(this.management);
-        this.organizations = new OrganizationsAPI(this.management);
-        this.appAccess = new AppAccessAPI(this.management);
-        this.billing = new BillingAPI(this.management);
-        this.payments = new PaymentsAPI(this.management);
-        this.quotas = new QuotasAPI(this.management);
-        this.usage = new UsageAPI(this.management);
-        this.sharedEnvironment = new SharedEnvironmentAPI(this.management);
-        this.operator = new ControlPlaneAPI(this.management);
+        // The redirect handler is installed here rather than passed into the
+        // transport's constructor because it has to move the REALTIME client too, and
+        // that does not exist yet at the point the transport is built.
+        //
+        // Both sides in one step, for the reason spelled out on `onEndpointMove`
+        // above: a client with its HTTP in one datacenter and its subscription in
+        // another looks connected and receives nothing, and here it is worse than the
+        // instance-level version of that split, because the datacenter left behind
+        // holds none of the app's shards and would refuse the subscription too.
+        this.graphql.setWrongDatacenterHandler((move) => {
+            const endpoint = toGraphqlEndpoint(move.gameApiUrl, 'graphql') ?? move.gameApiUrl;
+            if (endpoint === this.graphql.getEndpoint()) {
+                // Already there. Returning false stops the transport retrying, because a
+                // retry to the same instance is refused identically and a handler that
+                // reported success here would loop.
+                return false;
+            }
+            this.graphql.setEndpoint(endpoint);
+            this.realtime.moveToDatacenter({
+                httpUrl: move.gameApiUrl,
+                wsUrl: toGraphqlEndpoint(move.gameApiWsUrl, 'graphql') ?? null,
+                datacenter: move.appDatacenter,
+            });
+            return true;
+        });
+        this.auth = new AuthAPI(this.graphql, this.session);
+        this.users = new UsersAPI(this.graphql);
+        this.apps = new AppsAPI(this.graphql);
+        this.portal = new PortalAPI(this.graphql, this.session, config.pkceStore);
+        this.discovery = new DiscoveryDomain(this.graphql);
+        this.platform = new PlatformAPI(this.graphql);
+        this.organizations = new OrganizationsAPI(this.graphql);
+        this.appAccess = new AppAccessAPI(this.graphql);
+        this.billing = new BillingAPI(this.graphql);
+        this.payments = new PaymentsAPI(this.graphql);
+        this.quotas = new QuotasAPI(this.graphql);
+        this.usage = new UsageAPI(this.graphql);
+        this.sharedEnvironment = new SharedEnvironmentAPI(this.graphql);
+        this.operator = new ControlPlaneAPI(this.graphql);
         this.chunks = new ChunksAPI(this.graphql);
         this.voxels = new VoxelsAPI(this.graphql);
         this.actors = new ActorsAPI(this.graphql);
@@ -162,8 +189,8 @@ export class CrowdyClient {
             wsUrl: config.wsEndpoint ?? toGraphqlEndpoint(config.wsUrl, 'graphql'),
             getToken: () => this.session.getToken(),
         });
-        this.playerWallet = new PlayerWalletAPI(this.management);
-        this.marketplace = new MarketplaceAPI(this.graphql, this.management);
+        this.playerWallet = new PlayerWalletAPI(this.graphql);
+        this.marketplace = new MarketplaceAPI(this.graphql);
         this.playerModel = new PlayerModelAPI(this.graphql);
         this.avatars = new AvatarsAPI(this.graphql);
         this.host = new HostAPI(this.graphql);

package/dist/datacenter-redirect.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Reading a datacenter move out of a GraphQL error, in one place.
+ *
+ * WHY THIS IS ITS OWN MODULE. The server can raise `WRONG_DATACENTER` on three
+ * different transports — an HTTP POST, a websocket mutation, and a subscription —
+ * and they surface as three different error types (`CrowdyGraphQLError` and two
+ * shapes of `CrowdyRealtimeError`). The decision "is this a move, and where to" is
+ * identical in all three, and it is exactly the kind of small predicate that grows
+ * a second, slightly different copy the first time somebody fixes a bug in one of
+ * them.
+ *
+ * WHAT THE SERVER GUARANTEES, and what this therefore checks. A `WRONG_DATACENTER`
+ * always names an endpoint; an `APP_UNAVAILABLE` never does, because there is
+ * nowhere to send the client. So a "move" here means BOTH the code and a usable
+ * URL. A `WRONG_DATACENTER` with no URL is a server that has changed its mind
+ * about the contract, and the safe reading is "do not move" rather than "move to
+ * undefined".
+ */
+/** Where the server says this client should go instead. */
+export interface DatacenterMove {
+    /** Absolute HTTP origin or GraphQL URL of the app's own datacenter. */
+    gameApiUrl: string;
+    /** Matching websocket URL, when the server named one. */
+    gameApiWsUrl?: string;
+    /** The app the move is about, for logging. */
+    appId?: string;
+    /** The datacenter being moved to, for logging. */
+    appDatacenter?: string;
+}
+interface ErrorLike {
+    extensions?: Record<string, unknown> | null;
+}
+/**
+ * The move a single GraphQL error asks for, or null if it is not asking for one.
+ *
+ * @param error An entry from a GraphQL `errors[]` array.
+ */
+export declare function moveFromError(error: ErrorLike | null | undefined): DatacenterMove | null;
+/**
+ * The first move asked for anywhere in a GraphQL `errors[]` array.
+ *
+ * Scans the whole array rather than reading `errors[0]`, because a query naming
+ * several apps is refused per app and the misrouted one need not be first — and
+ * a client that only inspected the first error would ignore a redirect that was
+ * sitting right there.
+ */
+export declare function moveFromErrors(errors: readonly (ErrorLike | null | undefined)[] | null | undefined): DatacenterMove | null;
+export {};
+//# sourceMappingURL=datacenter-redirect.d.ts.map

package/dist/datacenter-redirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"datacenter-redirect.d.ts","sourceRoot":"","sources":["../src/datacenter-redirect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,SAAS;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC7C;AAMD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,GAClC,cAAc,GAAG,IAAI,CAiBvB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,SAAS,CAAC,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,GAAG,IAAI,GAAG,SAAS,GACnE,cAAc,GAAG,IAAI,CAMvB"}

package/dist/datacenter-redirect.js

@@ -0,0 +1,62 @@
+/**
+ * Reading a datacenter move out of a GraphQL error, in one place.
+ *
+ * WHY THIS IS ITS OWN MODULE. The server can raise `WRONG_DATACENTER` on three
+ * different transports — an HTTP POST, a websocket mutation, and a subscription —
+ * and they surface as three different error types (`CrowdyGraphQLError` and two
+ * shapes of `CrowdyRealtimeError`). The decision "is this a move, and where to" is
+ * identical in all three, and it is exactly the kind of small predicate that grows
+ * a second, slightly different copy the first time somebody fixes a bug in one of
+ * them.
+ *
+ * WHAT THE SERVER GUARANTEES, and what this therefore checks. A `WRONG_DATACENTER`
+ * always names an endpoint; an `APP_UNAVAILABLE` never does, because there is
+ * nowhere to send the client. So a "move" here means BOTH the code and a usable
+ * URL. A `WRONG_DATACENTER` with no URL is a server that has changed its mind
+ * about the contract, and the safe reading is "do not move" rather than "move to
+ * undefined".
+ */
+import { WRONG_DATACENTER_CODE } from './errors.js';
+function asString(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+/**
+ * The move a single GraphQL error asks for, or null if it is not asking for one.
+ *
+ * @param error An entry from a GraphQL `errors[]` array.
+ */
+export function moveFromError(error) {
+    const extensions = error?.extensions;
+    if (!extensions)
+        return null;
+    if (extensions.code !== WRONG_DATACENTER_CODE)
+        return null;
+    const gameApiUrl = asString(extensions.gameApiUrl);
+    // No endpoint means no move. See the note at the top: this is a contract
+    // violation rather than an ordinary case, and guessing would send the client
+    // somewhere it was not told to go.
+    if (!gameApiUrl)
+        return null;
+    return {
+        gameApiUrl,
+        gameApiWsUrl: asString(extensions.gameApiWsUrl),
+        appId: asString(extensions.appId),
+        appDatacenter: asString(extensions.appDatacenter),
+    };
+}
+/**
+ * The first move asked for anywhere in a GraphQL `errors[]` array.
+ *
+ * Scans the whole array rather than reading `errors[0]`, because a query naming
+ * several apps is refused per app and the misrouted one need not be first — and
+ * a client that only inspected the first error would ignore a redirect that was
+ * sitting right there.
+ */
+export function moveFromErrors(errors) {
+    for (const error of errors ?? []) {
+        const move = moveFromError(error);
+        if (move)
+            return move;
+    }
+    return null;
+}

package/dist/domains/appAccess.d.ts

@@ -4,7 +4,7 @@ import { type AppAccessTiersQuery, type MyAppAccessQuery, type AppUserAccessByAp
  * App access tiers + per-user access grants — exposed as `client.appAccess`
  * (and grouped under `client.admin`).
  *
- * Targets the **management-api**. Tiers define the runtime-permission bundles
+ * Part of the management surface. Tiers define the runtime-permission bundles
  * (`access`, `teleport`, `update_voxel_data`, `use_voice_chat`, ...) a player
  * gets; grants attach a user to a tier. New apps auto-provision an open default
  * tier, so most players need no explicit grant.
@@ -17,8 +17,8 @@ import { type AppAccessTiersQuery, type MyAppAccessQuery, type AppUserAccessByAp
  *   per the permission notes above.
  */
 export declare class AppAccessAPI {
-    private readonly management;
-    constructor(management: GraphQLClient);
+    private readonly api;
+    constructor(api: GraphQLClient);
     /**
      * List the access tiers defined for an app. **Public.**
      *

package/dist/domains/appAccess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"appAccess.d.ts","sourceRoot":"","sources":["../../src/domains/appAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAcL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,qCAAqC,EAC1C,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,aAAa;IAEtD;;;;;OAKG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAO1E;;;;;;OAMG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAKvE;;;;;;;;OAQG;IACG,UAAU,CACd,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9D,OAAO,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IAUzD;;;;;;;;;OASG;IACG,oBAAoB,CACxB,IAAI,EAAE,qCAAqC,GAC1C,OAAO,CAAC,4BAA4B,CAAC,yBAAyB,CAAC,CAAC;IAQnE;;;;;;OAMG;IACG,kBAAkB,IAAI,OAAO,CACjC,uBAAuB,CAAC,oBAAoB,CAAC,CAC9C;IAKD;;;;;;;OAOG;IACG,qBAAqB,CACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,6BAA6B,CAAC,0BAA0B,CAAC,CAAC;IAQrE;;;;;;;OAOG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;IAO5D;;;;;;OAMG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAOxD;;;;;;;OAOG;IACG,UAAU,CACd,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAOxD;;;;;;;OAOG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAQxD;;;;;;OAMG;IACG,WAAW,CACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;IAO1D;;;;;;;OAOG;IACG,KAAK,CACT,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IAOpD;;;;;;;OAOG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;CAOvD"}
+{"version":3,"file":"appAccess.d.ts","sourceRoot":"","sources":["../../src/domains/appAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAcL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,qCAAqC,EAC1C,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAE/C;;;;;OAKG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAO1E;;;;;;OAMG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAKvE;;;;;;;;OAQG;IACG,UAAU,CACd,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9D,OAAO,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IAUzD;;;;;;;;;OASG;IACG,oBAAoB,CACxB,IAAI,EAAE,qCAAqC,GAC1C,OAAO,CAAC,4BAA4B,CAAC,yBAAyB,CAAC,CAAC;IAQnE;;;;;;OAMG;IACG,kBAAkB,IAAI,OAAO,CACjC,uBAAuB,CAAC,oBAAoB,CAAC,CAC9C;IAKD;;;;;;;OAOG;IACG,qBAAqB,CACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,6BAA6B,CAAC,0BAA0B,CAAC,CAAC;IAQrE;;;;;;;OAOG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;IAO5D;;;;;;OAMG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAOxD;;;;;;;OAOG;IACG,UAAU,CACd,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAOxD;;;;;;;OAOG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAQxD;;;;;;OAMG;IACG,WAAW,CACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;IAO1D;;;;;;;OAOG;IACG,KAAK,CACT,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IAOpD;;;;;;;OAOG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;CAOvD"}

package/dist/domains/appAccess.js

@@ -3,7 +3,7 @@ import { AppAccessTiersDocument, MyAppAccessDocument, AppUserAccessByAppDocument
  * App access tiers + per-user access grants — exposed as `client.appAccess`
  * (and grouped under `client.admin`).
  *
- * Targets the **management-api**. Tiers define the runtime-permission bundles
+ * Part of the management surface. Tiers define the runtime-permission bundles
  * (`access`, `teleport`, `update_voxel_data`, `use_voice_chat`, ...) a player
  * gets; grants attach a user to a tier. New apps auto-provision an open default
  * tier, so most players need no explicit grant.
@@ -16,8 +16,8 @@ import { AppAccessTiersDocument, MyAppAccessDocument, AppUserAccessByAppDocument
  *   per the permission notes above.
  */
 export class AppAccessAPI {
-    constructor(management) {
-        this.management = management;
+    constructor(api) {
+        this.api = api;
     }
     /**
      * List the access tiers defined for an app. **Public.**
@@ -26,7 +26,7 @@ export class AppAccessAPI {
      * @returns The app's tiers, ordered.
      */
     async tiers(appId) {
-        const data = await this.management.request(AppAccessTiersDocument, {
+        const data = await this.api.request(AppAccessTiersDocument, {
             appId,
         });
         return data.appAccessTiers;
@@ -39,7 +39,7 @@ export class AppAccessAPI {
      * @returns The caller's {@link AppUserAccess}, or `null`.
      */
     async myAccess(appId) {
-        const data = await this.management.request(MyAppAccessDocument, { appId });
+        const data = await this.api.request(MyAppAccessDocument, { appId });
         return data.myAppAccess;
     }
     /**
@@ -52,7 +52,7 @@ export class AppAccessAPI {
      * @returns The matching access records.
      */
     async usersByApp(appId, opts = {}) {
-        const data = await this.management.request(AppUserAccessByAppDocument, {
+        const data = await this.api.request(AppUserAccessByAppDocument, {
             appId,
             status: opts.status,
             limit: opts.limit,
@@ -71,7 +71,7 @@ export class AppAccessAPI {
      * @returns An {@link AppUserAccessConnection}.
      */
     async usersByAppConnection(args) {
-        const data = await this.management.request(AppUserAccessConnectionDocument, args);
+        const data = await this.api.request(AppUserAccessConnectionDocument, args);
         return data.appUserAccessConnection;
     }
     /**
@@ -82,7 +82,7 @@ export class AppAccessAPI {
      * @returns The runtime permission keys.
      */
     async runtimePermissions() {
-        const data = await this.management.request(RuntimePermissionsDocument);
+        const data = await this.api.request(RuntimePermissionsDocument);
         return data.runtimePermissions;
     }
     /**
@@ -94,7 +94,7 @@ export class AppAccessAPI {
      * @returns The candidate users (id + email/gamertag where known).
      */
     async grantMemberCandidates(appId) {
-        const data = await this.management.request(AppGrantMemberCandidatesDocument, { appId });
+        const data = await this.api.request(AppGrantMemberCandidatesDocument, { appId });
         return data.appGrantMemberCandidates;
     }
     /**
@@ -106,7 +106,7 @@ export class AppAccessAPI {
      * @returns The caller's new {@link AppUserAccess} record.
      */
     async claimFree(appId) {
-        const data = await this.management.request(ClaimFreeAppAccessDocument, {
+        const data = await this.api.request(ClaimFreeAppAccessDocument, {
             appId,
         });
         return data.claimFreeAppAccess;
@@ -119,7 +119,7 @@ export class AppAccessAPI {
      * @returns The caller's new {@link AppUserAccess} record.
      */
     async grantMine(appId) {
-        const data = await this.management.request(GrantMyAppAccessDocument, {
+        const data = await this.api.request(GrantMyAppAccessDocument, {
             appId,
         });
         return data.grantMyAppAccess;
@@ -133,7 +133,7 @@ export class AppAccessAPI {
      * @returns The created tier.
      */
     async createTier(input) {
-        const data = await this.management.request(CreateAccessTierDocument, {
+        const data = await this.api.request(CreateAccessTierDocument, {
             input,
         });
         return data.createAccessTier;
@@ -147,7 +147,7 @@ export class AppAccessAPI {
      * @returns The updated tier.
      */
     async updateTier(tierId, input) {
-        const data = await this.management.request(UpdateAccessTierDocument, {
+        const data = await this.api.request(UpdateAccessTierDocument, {
             tierId,
             input,
         });
@@ -161,7 +161,7 @@ export class AppAccessAPI {
      * @returns The archived tier's new status.
      */
     async archiveTier(tierId) {
-        const data = await this.management.request(ArchiveAccessTierDocument, {
+        const data = await this.api.request(ArchiveAccessTierDocument, {
             tierId,
         });
         return data.archiveAccessTier;
@@ -175,7 +175,7 @@ export class AppAccessAPI {
      * @returns The created/updated access record.
      */
     async grant(input) {
-        const data = await this.management.request(GrantAppAccessDocument, {
+        const data = await this.api.request(GrantAppAccessDocument, {
             input,
         });
         return data.grantAppAccess;
@@ -189,7 +189,7 @@ export class AppAccessAPI {
      * @returns `true` on success.
      */
     async revoke(appId, userId) {
-        const data = await this.management.request(RevokeAppAccessDocument, {
+        const data = await this.api.request(RevokeAppAccessDocument, {
             appId,
             userId,
         });

package/dist/domains/apps.d.ts

@@ -30,7 +30,7 @@ export interface AppRoute {
 /**
  * App discovery & game-api routing — exposed as `client.apps`.
  *
- * Targets the **management-api** (every call routes to `managementUrl`), where
+ * Part of the management surface, where
  * the apps catalog lives. After the database split an app may be served by its
  * own per-tenant cks-game-api; the catalog returns each app's `gameApiUrl` so
  * you can build a per-app `CrowdyClient` against the correct endpoint (see
@@ -45,17 +45,13 @@ export interface AppRoute {
  *
  * @example
  * ```ts
- * const base = createCrowdyClient({
- *   managementUrl: 'https://api.example.com',
- *   httpUrl: 'https://legacy-game-api.example.com', // pre-split fallback
- * });
+ * const base = createCrowdyClient({ httpUrl: 'https://api.example.com/graphql' });
  * await base.auth.login({ email, password });
  *
  * const route = await base.apps.routeFor(appId);
  * if (route.gameApiUrl) {
  *   // route gameplay to the app's resolved game-api endpoint
  *   const perAppClient = createCrowdyClient({
- *     managementUrl: 'https://api.example.com',
  *     httpUrl: route.gameApiUrl,
  *     wsUrl: route.gameApiUrl.replace(/^http/, 'ws'),
  *     tokenStore: base.session.tokenStore,
@@ -64,8 +60,8 @@ export interface AppRoute {
  * ```
  */
 export declare class AppsAPI {
-    private readonly management;
-    constructor(management: GraphQLClient);
+    private readonly api;
+    constructor(api: GraphQLClient);
     /**
      * Read the app's player-code admission mode. Requires
      * `view_compute_diagnostics`.

package/dist/domains/apps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apps.d.ts","sourceRoot":"","sources":["../../src/domains/apps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAgBL,KAAK,QAAQ,EAEb,KAAK,cAAc,EAEnB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,EACjC,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EACpC,KAAK,oBAAoB,EACzB,KAAK,8BAA8B,EAEnC,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AAEjC;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;;;OAIG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,aAAa;IAEtD;;;OAGG;IACG,iBAAiB,CACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;IAO7D;;;;OAIG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,cAAc,UAAQ,GACrB,OAAO,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IAYvD;;;;OAIG;IACG,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,+BAA+B,CAAC,yBAAyB,CAAC,CAAC;IAQtE;;;OAGG;IACG,SAAS,CACb,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAKhD;;;OAGG;IACG,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,8BAA8B,CAAC,wBAAwB,CAAC,CAAC;IAQpE;;;;;;;;;OASG;IACG,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAQlD;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAQvC;;;;;;;;OAQG;IACG,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAQ9C;;;;;;;;;;;;;OAaG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYhD;;;;;;;OAOG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAKrE;;;;;;;;;OASG;IACG,WAAW,CACf,IAAI,GAAE;QACJ,MAAM,CAAC,EAAE,6BAA6B,CAAC,QAAQ,CAAC,CAAC;QACjD,KAAK,CAAC,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,6BAA6B,CAAC,QAAQ,CAAC,CAAC;KAC7C,GACL,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAKxC;;;;;;;OAOG;IACG,qBAAqB,CACzB,IAAI,GAAE,4BAAiC,GACtC,OAAO,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAKjD;;;;;;;;;OASG;IACG,MAAM,CACV,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAK1C;;;;;;;;OAQG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAQ1C;;;;;;;OAOG;IACG,OAAO,CACX,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAK5C;;;;;;;OAOG;IACG,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,aAAa,GACxB,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;CAOzD"}
+{"version":3,"file":"apps.d.ts","sourceRoot":"","sources":["../../src/domains/apps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAgBL,KAAK,QAAQ,EAEb,KAAK,cAAc,EAEnB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,EACjC,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EACpC,KAAK,oBAAoB,EACzB,KAAK,8BAA8B,EAEnC,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AAEjC;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;;;OAIG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAE/C;;;OAGG;IACG,iBAAiB,CACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;IAO7D;;;;OAIG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,cAAc,UAAQ,GACrB,OAAO,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IAYvD;;;;OAIG;IACG,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,+BAA+B,CAAC,yBAAyB,CAAC,CAAC;IAQtE;;;OAGG;IACG,SAAS,CACb,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAKhD;;;OAGG;IACG,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,8BAA8B,CAAC,wBAAwB,CAAC,CAAC;IAQpE;;;;;;;;;OASG;IACG,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAQlD;;;;;;;;;;;;OAYG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAQvC;;;;;;;;OAQG;IACG,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAQ9C;;;;;;;;;;;;;OAaG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYhD;;;;;;;OAOG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAKrE;;;;;;;;;OASG;IACG,WAAW,CACf,IAAI,GAAE;QACJ,MAAM,CAAC,EAAE,6BAA6B,CAAC,QAAQ,CAAC,CAAC;QACjD,KAAK,CAAC,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,6BAA6B,CAAC,QAAQ,CAAC,CAAC;KAC7C,GACL,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAKxC;;;;;;;OAOG;IACG,qBAAqB,CACzB,IAAI,GAAE,4BAAiC,GACtC,OAAO,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAKjD;;;;;;;;;OASG;IACG,MAAM,CACV,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAK1C;;;;;;;;OAQG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAQ1C;;;;;;;OAOG;IACG,OAAO,CACX,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAK5C;;;;;;;OAOG;IACG,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,aAAa,GACxB,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;CAOzD"}

package/dist/domains/apps.js

@@ -15,7 +15,7 @@ function appRouteFromAppRow(row) {
 /**
  * App discovery & game-api routing — exposed as `client.apps`.
  *
- * Targets the **management-api** (every call routes to `managementUrl`), where
+ * Part of the management surface, where
  * the apps catalog lives. After the database split an app may be served by its
  * own per-tenant cks-game-api; the catalog returns each app's `gameApiUrl` so
  * you can build a per-app `CrowdyClient` against the correct endpoint (see
@@ -30,17 +30,13 @@ function appRouteFromAppRow(row) {
  *
  * @example
  * ```ts
- * const base = createCrowdyClient({
- *   managementUrl: 'https://api.example.com',
- *   httpUrl: 'https://legacy-game-api.example.com', // pre-split fallback
- * });
+ * const base = createCrowdyClient({ httpUrl: 'https://api.example.com/graphql' });
  * await base.auth.login({ email, password });
  *
  * const route = await base.apps.routeFor(appId);
  * if (route.gameApiUrl) {
  *   // route gameplay to the app's resolved game-api endpoint
  *   const perAppClient = createCrowdyClient({
- *     managementUrl: 'https://api.example.com',
  *     httpUrl: route.gameApiUrl,
  *     wsUrl: route.gameApiUrl.replace(/^http/, 'ws'),
  *     tokenStore: base.session.tokenStore,
@@ -49,15 +45,15 @@ function appRouteFromAppRow(row) {
  * ```
  */
 export class AppsAPI {
-    constructor(management) {
-        this.management = management;
+    constructor(api) {
+        this.api = api;
     }
     /**
      * Read the app's player-code admission mode. Requires
      * `view_compute_diagnostics`.
      */
     async codeAdmissionMode(appId) {
-        const data = await this.management.request(AppCodeAdmissionModeDocument, {
+        const data = await this.api.request(AppCodeAdmissionModeDocument, {
             appId,
         });
         return data.appCodeAdmissionMode;
@@ -72,7 +68,7 @@ export class AppsAPI {
             appId,
             includeRevoked,
         };
-        const data = await this.management.request(AppCodeAdmissionsDocument, variables);
+        const data = await this.api.request(AppCodeAdmissionsDocument, variables);
         return data.appCodeAdmissions;
     }
     /**
@@ -81,7 +77,7 @@ export class AppsAPI {
      * `manage_compute`.
      */
     async setCodeAdmissionMode(appId, mode) {
-        const data = await this.management.request(SetAppCodeAdmissionModeDocument, {
+        const data = await this.api.request(SetAppCodeAdmissionModeDocument, {
             appId,
             mode,
         });
@@ -92,7 +88,7 @@ export class AppsAPI {
      * controls execution only and never grants source visibility.
      */
     async admitCode(input) {
-        const data = await this.management.request(AdmitAppCodeDocument, { input });
+        const data = await this.api.request(AdmitAppCodeDocument, { input });
         return data.admitAppCode;
     }
     /**
@@ -100,7 +96,7 @@ export class AppsAPI {
      * change, then drains affected server modules and blocks client artifacts.
      */
     async revokeCodeAdmission(appId, admissionId) {
-        const data = await this.management.request(RevokeAppCodeAdmissionDocument, { appId, admissionId });
+        const data = await this.api.request(RevokeAppCodeAdmissionDocument, { appId, admissionId });
         return data.revokeAppCodeAdmission;
     }
     /**
@@ -114,7 +110,7 @@ export class AppsAPI {
      * @throws {CrowdyGraphQLError} `UNAUTHENTICATED` if the caller is not signed in.
      */
     async app(appId) {
-        const data = await this.management.request(AppDocument, { appId });
+        const data = await this.api.request(AppDocument, { appId });
         return data.app;
     }
     /**
@@ -131,7 +127,7 @@ export class AppsAPI {
      * @throws {CrowdyGraphQLError} on transport/validation failures.
      */
     async appBySlug(orgSlug, appSlug) {
-        const data = await this.management.request(AppBySlugDocument, { orgSlug, appSlug });
+        const data = await this.api.request(AppBySlugDocument, { orgSlug, appSlug });
         return data.appBySlug;
     }
     /**
@@ -144,7 +140,7 @@ export class AppsAPI {
      * @throws {CrowdyGraphQLError} `UNAUTHENTICATED` if the caller is not signed in.
      */
     async myApps() {
-        const data = await this.management.request(MyAppsDocument, {});
+        const data = await this.api.request(MyAppsDocument, {});
         return data.myApps;
     }
     /**
@@ -179,7 +175,7 @@ export class AppsAPI {
      * @throws {CrowdyGraphQLError} `UNAUTHENTICATED` / `FORBIDDEN`.
      */
     async forOrg(orgSlug) {
-        const data = await this.management.request(AppsForOrgDocument, { orgSlug });
+        const data = await this.api.request(AppsForOrgDocument, { orgSlug });
         return data.appsForOrg;
     }
     /**
@@ -193,7 +189,7 @@ export class AppsAPI {
      *   large catalogs; the offset args here are deprecated server-side.
      */
     async marketplace(opts = {}) {
-        const data = await this.management.request(MarketplaceAppsDocument, opts);
+        const data = await this.api.request(MarketplaceAppsDocument, opts);
         return data.apps;
     }
     /**
@@ -205,7 +201,7 @@ export class AppsAPI {
      * @returns An apps connection.
      */
     async marketplaceConnection(args = {}) {
-        const data = await this.management.request(AppsConnectionDocument, args);
+        const data = await this.api.request(AppsConnectionDocument, args);
         return data.appsConnection;
     }
     /**
@@ -219,7 +215,7 @@ export class AppsAPI {
      *   `manage_apps`, or `BAD_USER_INPUT` (e.g. duplicate slug).
      */
     async create(input) {
-        const data = await this.management.request(CreateAppDocument, { input });
+        const data = await this.api.request(CreateAppDocument, { input });
         return data.createApp;
     }
     /**
@@ -232,7 +228,7 @@ export class AppsAPI {
      *   `manage_apps`.
      */
     async update(appId, input) {
-        const data = await this.management.request(UpdateAppDocument, {
+        const data = await this.api.request(UpdateAppDocument, {
             appId,
             input,
         });
@@ -247,7 +243,7 @@ export class AppsAPI {
      *   `manage_apps`.
      */
     async archive(appId) {
-        const data = await this.management.request(ArchiveAppDocument, { appId });
+        const data = await this.api.request(ArchiveAppDocument, { appId });
         return data.archiveApp;
     }
     /**
@@ -259,7 +255,7 @@ export class AppsAPI {
      * @throws {CrowdyGraphQLError} `FORBIDDEN` for non-super-admins.
      */
     async setVisibility(appId, visibility) {
-        const data = await this.management.request(SetAppVisibilityDocument, {
+        const data = await this.api.request(SetAppVisibilityDocument, {
             appId,
             visibility,
         });

package/dist/domains/auth.d.ts

@@ -9,7 +9,7 @@ import type { AuthState } from '../auth-state.js';
  * SESSION token (management-plane), which is stored on the shared session state
  * automatically. Gameplay tokens are minted separately via `client.portal`.
  *
- * Targets the **management-api** (`managementUrl`).
+ * Part of the management surface.
  *
  * **Public (no session):** {@link requestLoginLink}, {@link completeLoginLink},
  * {@link socialLoginStart}, {@link socialLoginComplete}, {@link devLogin},