@crowdedkingdoms/crowdyjs 17.6.0 → 17.7.0-dev.1

package/dist/domains/actors.d.ts

@@ -16,10 +16,14 @@ import { type ActorQuery, type ActorQueryVariables, type ActorsQuery, type Actor
  * `BigInt` values (`appId`, `avatarId`, `userId`) are sent and received as
  * decimal strings.
  *
- * Every method requires an authenticated session (a Bearer token set via
- * `client.auth.login()` or `client.setToken()`) and that the caller is
- * entitled to the target app, or it throws {@link CrowdyGraphQLError}
- * (`UNAUTHENTICATED` / `FORBIDDEN`).
+ * Actors are **game-plane** objects: every method wants an **app token for the
+ * actor's app** (minted with `client.portal.mintAppToken()` and set via
+ * `client.setToken()`), and the by-id methods ({@link get}, {@link update},
+ * {@link updateState}, {@link delete}) answer `NOT_FOUND` — the same as a
+ * missing id — for a session token or another app's token. {@link list} /
+ * {@link listConnection} are the caller's own actors and, under an app token,
+ * only the ones in that app. No token at all throws {@link CrowdyGraphQLError}
+ * `UNAUTHENTICATED`.
  */
 export declare class ActorsAPI {
     private gql;
@@ -28,17 +32,22 @@ export declare class ActorsAPI {
      * Fetch a single persisted actor by its 32-character actor id.
      *
      * @param uuid - The actor's 32-ASCII-character id.
-     * @returns The {@link Actor}, or `null` if no actor with that id exists.
-     * @throws {CrowdyGraphQLError} `UNAUTHENTICATED` / `FORBIDDEN` if the caller
-     *   isn't entitled to the actor's app.
+     * @returns The {@link Actor}. The owner sees `privateState`; anyone else in
+     *   the app gets a public copy with `privateState` `null`.
+     * @throws {CrowdyGraphQLError} `UNAUTHENTICATED` if the caller has no token;
+     *   `NOT_FOUND` if the uuid does not exist in the caller's app (a session
+     *   token or another app's token gets the same answer).
      */
     get(uuid: ActorQueryVariables['uuid']): Promise<ActorQuery['actor']>;
     /**
-     * List persisted actors, optionally narrowed by an {@link ActorFilterInput}
-     * (e.g. by app, owning user, or avatar). Omit the filter to use its defaults.
+     * List the **caller's own** persisted actors, optionally narrowed by an
+     * {@link ActorFilterInput} (app, avatar, uuid, chunk). Under an app token the
+     * list is confined to that token's app whether or not `filter.appId` is
+     * given; a `filter.appId` naming another app is refused (`SCOPE_MISSING`).
+     * A session token lists the caller's actors across every app.
      *
      * @param filter - Optional filter; fields are ANDed together.
-     * @returns The matching actors.
+     * @returns The matching actors (full state; they are all the caller's).
      * @throws {CrowdyGraphQLError} on auth/validation failures.
      */
     list(filter?: ActorsQueryVariables['filter']): Promise<ActorsQuery['actors']>;
@@ -51,7 +60,8 @@ export declare class ActorsAPI {
      * @param args - Optional `first` (default 50, max 200), `after` cursor, and
      *   {@link ActorFilterInput}.
      * @returns An {@link ActorsConnection} (`edges { cursor node }`, `pageInfo`,
-     *   `totalCount`).
+     *   `totalCount`). Same scoping as {@link list}: under an app token, only
+     *   that app's actors.
      */
     listConnection(args?: ActorsConnectionQueryVariables): Promise<ActorsConnectionQuery['actorsConnection']>;
     /**
@@ -60,7 +70,11 @@ export declare class ActorsAPI {
      * {@link get} in a loop — it avoids N requests and N auth checks.
      *
      * @param input - The batch lookup keys.
-     * @returns The actors that were found (missing ids are simply omitted).
+     * @returns The actors that were found, public state only (`privateState` is
+     *   `null` for every result). Unknown ids **and ids in other apps** are
+     *   simply omitted.
+     * @throws {CrowdyGraphQLError} `UNAUTHENTICATED` if the caller has no token;
+     *   `NOT_FOUND` for a session token (this is an app-token-only field).
      */
     batchLookup(input: BatchLookupActorsQueryVariables['input']): Promise<BatchLookupActorsQuery['batchLookupActors']>;
     /**
@@ -82,8 +96,10 @@ export declare class ActorsAPI {
      * @param uuid - The actor's 32-character id.
      * @param input - Fields to change ({@link UpdateActorInput}).
      * @returns The updated {@link Actor}.
-     * @throws {CrowdyGraphQLError} if the actor doesn't exist or the caller lacks
-     *   access.
+     * @throws {CrowdyGraphQLError} `NOT_FOUND` if the uuid does not exist in the
+     *   caller's app (a session token or another app's token gets the same
+     *   answer); `UNAUTHENTICATED` if the caller is not the actor's owner (the
+     *   owner-only rule surfaces as a 401).
      */
     update(uuid: UpdateActorMutationVariables['uuid'], input: UpdateActorMutationVariables['input']): Promise<UpdateActorMutation['updateActor']>;
     /**
@@ -98,8 +114,10 @@ export declare class ActorsAPI {
      * @param uuid - The actor's 32-character id.
      * @param idempotencyKey - Optional client-supplied key for safe retries.
      * @returns The deleted {@link Actor} (its identifying fields).
-     * @throws {CrowdyGraphQLError} `IDEMPOTENCY_CONFLICT`, `FORBIDDEN`, or
-     *   `UNAUTHENTICATED`.
+     * @throws {CrowdyGraphQLError} `IDEMPOTENCY_CONFLICT`; `NOT_FOUND` if the
+     *   uuid does not exist in the caller's app (a session token or another
+     *   app's token gets the same answer); `UNAUTHENTICATED` with no token or
+     *   when the caller is not the owner (the owner-only rule surfaces as a 401).
      */
     delete(uuid: DeleteActorMutationVariables['uuid'], idempotencyKey?: DeleteActorMutationVariables['idempotencyKey']): Promise<DeleteActorMutation['deleteActor']>;
     /**
@@ -110,7 +128,10 @@ export declare class ActorsAPI {
      * @param uuid - The actor's 32-character id.
      * @param input - {@link UpdateActorStateInput}.
      * @returns The updated {@link Actor}.
-     * @throws {CrowdyGraphQLError} on auth/validation failures.
+     * @throws {CrowdyGraphQLError} `NOT_FOUND` if the uuid does not exist in the
+     *   caller's app (a session token or another app's token gets the same
+     *   answer); `UNAUTHENTICATED` if the caller is not the owner (the
+     *   owner-only rule surfaces as a 401); `BAD_USER_INPUT` for a malformed blob.
      */
     updateState(uuid: UpdateActorStateMutationVariables['uuid'], input: UpdateActorStateMutationVariables['input']): Promise<UpdateActorStateMutation['updateActorState']>;
 }

package/dist/domains/actors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actors.d.ts","sourceRoot":"","sources":["../../src/domains/actors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,mBAAmB,EAExB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EAEzB,KAAK,qBAAqB,EAC1B,KAAK,8BAA8B,EAEnC,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EAEpC,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,EAEjC,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,EAEjC,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,EAEjC,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACvC,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,SAAS;IACR,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEtC;;;;;;;OAOG;IACG,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAK1E;;;;;;;OAOG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAKnF;;;;;;;;;;OAUG;IACG,cAAc,CAClB,IAAI,GAAE,8BAAmC,GACxC,OAAO,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAKrD;;;;;;;OAOG;IACG,WAAW,CACf,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,GAC9C,OAAO,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IAKvD;;;;;;;;;;OAUG;IACG,MAAM,CACV,KAAK,EAAE,4BAA4B,CAAC,OAAO,CAAC,GAC3C,OAAO,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAK9C;;;;;;;;;OASG;IACG,MAAM,CACV,IAAI,EAAE,4BAA4B,CAAC,MAAM,CAAC,EAC1C,KAAK,EAAE,4BAA4B,CAAC,OAAO,CAAC,GAC3C,OAAO,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAK9C;;;;;;;;;;;;;;OAcG;IACG,MAAM,CACV,IAAI,EAAE,4BAA4B,CAAC,MAAM,CAAC,EAC1C,cAAc,CAAC,EAAE,4BAA4B,CAAC,gBAAgB,CAAC,GAC9D,OAAO,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAK9C;;;;;;;;;OASG;IACG,WAAW,CACf,IAAI,EAAE,iCAAiC,CAAC,MAAM,CAAC,EAC/C,KAAK,EAAE,iCAAiC,CAAC,OAAO,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;CAIzD"}
+{"version":3,"file":"actors.d.ts","sourceRoot":"","sources":["../../src/domains/actors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,mBAAmB,EAExB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EAEzB,KAAK,qBAAqB,EAC1B,KAAK,8BAA8B,EAEnC,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EAEpC,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,EAEjC,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,EAEjC,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,EAEjC,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACvC,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,SAAS;IACR,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEtC;;;;;;;;;OASG;IACG,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAK1E;;;;;;;;;;OAUG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAKnF;;;;;;;;;;;OAWG;IACG,cAAc,CAClB,IAAI,GAAE,8BAAmC,GACxC,OAAO,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAKrD;;;;;;;;;;;OAWG;IACG,WAAW,CACf,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,GAC9C,OAAO,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IAKvD;;;;;;;;;;OAUG;IACG,MAAM,CACV,KAAK,EAAE,4BAA4B,CAAC,OAAO,CAAC,GAC3C,OAAO,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAK9C;;;;;;;;;;;OAWG;IACG,MAAM,CACV,IAAI,EAAE,4BAA4B,CAAC,MAAM,CAAC,EAC1C,KAAK,EAAE,4BAA4B,CAAC,OAAO,CAAC,GAC3C,OAAO,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAK9C;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,CACV,IAAI,EAAE,4BAA4B,CAAC,MAAM,CAAC,EAC1C,cAAc,CAAC,EAAE,4BAA4B,CAAC,gBAAgB,CAAC,GAC9D,OAAO,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAK9C;;;;;;;;;;;;OAYG;IACG,WAAW,CACf,IAAI,EAAE,iCAAiC,CAAC,MAAM,CAAC,EAC/C,KAAK,EAAE,iCAAiC,CAAC,OAAO,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;CAIzD"}

package/dist/domains/actors.js

@@ -15,10 +15,14 @@ import { ActorDocument, ActorsDocument, ActorsConnectionDocument, BatchLookupAct
  * `BigInt` values (`appId`, `avatarId`, `userId`) are sent and received as
  * decimal strings.
  *
- * Every method requires an authenticated session (a Bearer token set via
- * `client.auth.login()` or `client.setToken()`) and that the caller is
- * entitled to the target app, or it throws {@link CrowdyGraphQLError}
- * (`UNAUTHENTICATED` / `FORBIDDEN`).
+ * Actors are **game-plane** objects: every method wants an **app token for the
+ * actor's app** (minted with `client.portal.mintAppToken()` and set via
+ * `client.setToken()`), and the by-id methods ({@link get}, {@link update},
+ * {@link updateState}, {@link delete}) answer `NOT_FOUND` — the same as a
+ * missing id — for a session token or another app's token. {@link list} /
+ * {@link listConnection} are the caller's own actors and, under an app token,
+ * only the ones in that app. No token at all throws {@link CrowdyGraphQLError}
+ * `UNAUTHENTICATED`.
  */
 export class ActorsAPI {
     constructor(gql) {
@@ -28,20 +32,25 @@ export class ActorsAPI {
      * Fetch a single persisted actor by its 32-character actor id.
      *
      * @param uuid - The actor's 32-ASCII-character id.
-     * @returns The {@link Actor}, or `null` if no actor with that id exists.
-     * @throws {CrowdyGraphQLError} `UNAUTHENTICATED` / `FORBIDDEN` if the caller
-     *   isn't entitled to the actor's app.
+     * @returns The {@link Actor}. The owner sees `privateState`; anyone else in
+     *   the app gets a public copy with `privateState` `null`.
+     * @throws {CrowdyGraphQLError} `UNAUTHENTICATED` if the caller has no token;
+     *   `NOT_FOUND` if the uuid does not exist in the caller's app (a session
+     *   token or another app's token gets the same answer).
      */
     async get(uuid) {
         const data = await this.gql.request(ActorDocument, { uuid });
         return data.actor;
     }
     /**
-     * List persisted actors, optionally narrowed by an {@link ActorFilterInput}
-     * (e.g. by app, owning user, or avatar). Omit the filter to use its defaults.
+     * List the **caller's own** persisted actors, optionally narrowed by an
+     * {@link ActorFilterInput} (app, avatar, uuid, chunk). Under an app token the
+     * list is confined to that token's app whether or not `filter.appId` is
+     * given; a `filter.appId` naming another app is refused (`SCOPE_MISSING`).
+     * A session token lists the caller's actors across every app.
      *
      * @param filter - Optional filter; fields are ANDed together.
-     * @returns The matching actors.
+     * @returns The matching actors (full state; they are all the caller's).
      * @throws {CrowdyGraphQLError} on auth/validation failures.
      */
     async list(filter) {
@@ -57,7 +66,8 @@ export class ActorsAPI {
      * @param args - Optional `first` (default 50, max 200), `after` cursor, and
      *   {@link ActorFilterInput}.
      * @returns An {@link ActorsConnection} (`edges { cursor node }`, `pageInfo`,
-     *   `totalCount`).
+     *   `totalCount`). Same scoping as {@link list}: under an app token, only
+     *   that app's actors.
      */
     async listConnection(args = {}) {
         const data = await this.gql.request(ActorsConnectionDocument, args);
@@ -69,7 +79,11 @@ export class ActorsAPI {
      * {@link get} in a loop — it avoids N requests and N auth checks.
      *
      * @param input - The batch lookup keys.
-     * @returns The actors that were found (missing ids are simply omitted).
+     * @returns The actors that were found, public state only (`privateState` is
+     *   `null` for every result). Unknown ids **and ids in other apps** are
+     *   simply omitted.
+     * @throws {CrowdyGraphQLError} `UNAUTHENTICATED` if the caller has no token;
+     *   `NOT_FOUND` for a session token (this is an app-token-only field).
      */
     async batchLookup(input) {
         const data = await this.gql.request(BatchLookupActorsDocument, { input });
@@ -97,8 +111,10 @@ export class ActorsAPI {
      * @param uuid - The actor's 32-character id.
      * @param input - Fields to change ({@link UpdateActorInput}).
      * @returns The updated {@link Actor}.
-     * @throws {CrowdyGraphQLError} if the actor doesn't exist or the caller lacks
-     *   access.
+     * @throws {CrowdyGraphQLError} `NOT_FOUND` if the uuid does not exist in the
+     *   caller's app (a session token or another app's token gets the same
+     *   answer); `UNAUTHENTICATED` if the caller is not the actor's owner (the
+     *   owner-only rule surfaces as a 401).
      */
     async update(uuid, input) {
         const data = await this.gql.request(UpdateActorDocument, { uuid, input });
@@ -116,8 +132,10 @@ export class ActorsAPI {
      * @param uuid - The actor's 32-character id.
      * @param idempotencyKey - Optional client-supplied key for safe retries.
      * @returns The deleted {@link Actor} (its identifying fields).
-     * @throws {CrowdyGraphQLError} `IDEMPOTENCY_CONFLICT`, `FORBIDDEN`, or
-     *   `UNAUTHENTICATED`.
+     * @throws {CrowdyGraphQLError} `IDEMPOTENCY_CONFLICT`; `NOT_FOUND` if the
+     *   uuid does not exist in the caller's app (a session token or another
+     *   app's token gets the same answer); `UNAUTHENTICATED` with no token or
+     *   when the caller is not the owner (the owner-only rule surfaces as a 401).
      */
     async delete(uuid, idempotencyKey) {
         const data = await this.gql.request(DeleteActorDocument, { uuid, idempotencyKey });
@@ -131,7 +149,10 @@ export class ActorsAPI {
      * @param uuid - The actor's 32-character id.
      * @param input - {@link UpdateActorStateInput}.
      * @returns The updated {@link Actor}.
-     * @throws {CrowdyGraphQLError} on auth/validation failures.
+     * @throws {CrowdyGraphQLError} `NOT_FOUND` if the uuid does not exist in the
+     *   caller's app (a session token or another app's token gets the same
+     *   answer); `UNAUTHENTICATED` if the caller is not the owner (the
+     *   owner-only rule surfaces as a 401); `BAD_USER_INPUT` for a malformed blob.
      */
     async updateState(uuid, input) {
         const data = await this.gql.request(UpdateActorStateDocument, { uuid, input });

package/dist/domains/crowdyStudio.js

@@ -51,7 +51,7 @@ export class CrowdyStudioAPI {
                 serverModuleName: input.metadata.serverModuleName ?? null,
                 clientModuleName: input.metadata.clientModuleName ?? null,
                 pairingPreference: toApiPairing(input.kind, input.metadata.pairingPreference),
-                sdkVersion: '0.1.5',
+                sdkVersion: '0.1.6',
                 abiVersion: 0,
                 initialFiles: input.files.map(toApiFile),
             },

package/dist/domains/grids.d.ts

@@ -0,0 +1,30 @@
+import type { GraphQLClient } from '../client.js';
+import { type CreateGridChannelMutation, type CreateGridChannelMutationVariables, type GridChannelsQuery, type MintGridTokenMutation, type MintGridTokenMutationVariables } from '../generated/graphql.js';
+export type GridToken = MintGridTokenMutation['mintGridToken'];
+export type GridChannel = GridChannelsQuery['gridChannels'][number];
+/**
+ * Grid-scoped platform surfaces (DN-10): grid tokens and grid channels. Most
+ * code reaches these through `client.grid(appId, gridId)`, which binds the
+ * grid once; this class is the raw per-call form.
+ */
+export declare class GridsAPI {
+    private readonly gql;
+    constructor(gql: GraphQLClient);
+    /**
+     * Narrow the app token this client holds to one grid. The result admits a
+     * short fixed list of gameplay fields, each confined to the grid, and is
+     * refused by the binary relay. Hand it to code that should act inside the
+     * grid and nowhere else — `GridProgramHost` does exactly that. The caller
+     * must own the grid or hold `run_client_code` on it.
+     */
+    mintToken(input: MintGridTokenMutationVariables['input']): Promise<GridToken>;
+    /**
+     * Create a channel that belongs to a grid you own. The grid's player
+     * modules may `emit_channel` into it; their messages carry the sender uuid
+     * `grid:<gridId>`. Membership defaults to `open` so visitors can join.
+     */
+    createChannel(input: CreateGridChannelMutationVariables['input']): Promise<CreateGridChannelMutation['createGridChannel']>;
+    /** The active channels of one grid, oldest first. */
+    channels(appId: string, gridId: string): Promise<GridChannel[]>;
+}
+//# sourceMappingURL=grids.d.ts.map

package/dist/domains/grids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grids.d.ts","sourceRoot":"","sources":["../../src/domains/grids.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,kCAAkC,EAEvC,KAAK,iBAAiB,EAEtB,KAAK,qBAAqB,EAC1B,KAAK,8BAA8B,EACpC,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,SAAS,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;AAC/D,MAAM,MAAM,WAAW,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;GAIG;AACH,qBAAa,QAAQ;IACP,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAE/C;;;;;;OAMG;IACG,SAAS,CACb,KAAK,EAAE,8BAA8B,CAAC,OAAO,CAAC,GAC7C,OAAO,CAAC,SAAS,CAAC;IAKrB;;;;OAIG;IACG,aAAa,CACjB,KAAK,EAAE,kCAAkC,CAAC,OAAO,CAAC,GACjD,OAAO,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;IAK1D,qDAAqD;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAOtE"}

package/dist/domains/grids.js

@@ -0,0 +1,39 @@
+import { CreateGridChannelDocument, GridChannelsDocument, MintGridTokenDocument, } from '../generated/graphql.js';
+/**
+ * Grid-scoped platform surfaces (DN-10): grid tokens and grid channels. Most
+ * code reaches these through `client.grid(appId, gridId)`, which binds the
+ * grid once; this class is the raw per-call form.
+ */
+export class GridsAPI {
+    constructor(gql) {
+        this.gql = gql;
+    }
+    /**
+     * Narrow the app token this client holds to one grid. The result admits a
+     * short fixed list of gameplay fields, each confined to the grid, and is
+     * refused by the binary relay. Hand it to code that should act inside the
+     * grid and nowhere else — `GridProgramHost` does exactly that. The caller
+     * must own the grid or hold `run_client_code` on it.
+     */
+    async mintToken(input) {
+        const data = await this.gql.request(MintGridTokenDocument, { input });
+        return data.mintGridToken;
+    }
+    /**
+     * Create a channel that belongs to a grid you own. The grid's player
+     * modules may `emit_channel` into it; their messages carry the sender uuid
+     * `grid:<gridId>`. Membership defaults to `open` so visitors can join.
+     */
+    async createChannel(input) {
+        const data = await this.gql.request(CreateGridChannelDocument, { input });
+        return data.createGridChannel;
+    }
+    /** The active channels of one grid, oldest first. */
+    async channels(appId, gridId) {
+        const data = await this.gql.request(GridChannelsDocument, {
+            appId,
+            gridId,
+        });
+        return data.gridChannels;
+    }
+}

package/dist/domains/udp.d.ts

@@ -253,7 +253,11 @@ export declare class UdpAPI {
      *   - `chunk` — `{ x, y, z }` chunk address (signed int64 decimal strings).
      *   - `uuid` — 32-ASCII-character source id (typically the player; not
      *     RFC-4122).
-     *   - `audioData` — compressed audio, base64-encoded.
+     *   - `audioData` — compressed audio, base64-encoded. The platform never
+     *     inspects the bytes. Browser games should send G.711 µ-law, 8 kHz
+     *     mono, ~60 ms frames (480 bytes), with a wrapping `sequenceNumber`
+     *     so receivers can drop late/duplicate packets. See The Construct
+     *     `VoiceService` and Blocks with Friends `VoiceChat`.
      *   - `distance` — replication radius in chunk units, 0-8 (clamped); defaults
      *     to 1 for audio packets.
      *   - `decayRate` — decay algorithm 0-5 (see {@link sendActorUpdate});

package/dist/domains/udp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"udp.d.ts","sourceRoot":"","sources":["../../src/domains/udp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAEL,KAAK,uBAAuB,EAG5B,KAAK,6BAA6B,EAElC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,+BAA+B,EAEpC,KAAK,gCAAgC,EAErC,KAAK,uCAAuC,EAE5C,KAAK,mCAAmC,EACzC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAa1D,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAG1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,MAAM;IAKf,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,OAAO,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,2BAA2B,CAAC;IAZtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA+B;gBAG1D,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,mBAAmB,EACzB,OAAO,CAAC,EAAE,eAAe,YAAA;IACjC;;;;OAIG;IACK,2BAA2B,CAAC,GAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,aAAA;IAGjF;;;;OAIG;IACG,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;YAKpC,uBAAuB;IAWrC,OAAO,CAAC,gBAAgB;IAOxB,mEAAmE;IACnE,OAAO,CAAC,MAAM;IAId;;;;OAIG;YACW,YAAY;IAoB1B;;;;;;;;;;;;;OAaG;IACG,OAAO,IAAI,OAAO,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IAkBpE;;;;;;;;OAQG;IACH;;;;;OAKG;IACH,UAAU,IAAI,IAAI;IAIZ,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IASpC;;;;;;;OAOG;IACG,gBAAgB,IAAI,OAAO,CAC/B,6BAA6B,CAAC,0BAA0B,CAAC,CAC1D;IAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;YAKL,mBAAmB;IAyCjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,eAAe,CACnB,KAAK,EAAE,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG;QACrE,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GACA,OAAO,CAAC,OAAO,CAAC;IAgBnB;;;;;;;;;;;;;;;;;;OAkBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG;QACrE,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,EACD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;;;;;;OAiBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;OAgBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;OAYG;IACG,cAAc,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE;YAAE,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,UAAU,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBnB;;;;;;;;;;;;;;;;;;;OAmBG;IACG,cAAc,CAClB,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,GAC9C,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;;;;;;OAiBG;IACG,qBAAqB,CACzB,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,EAC/C,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;;;;;;;OAkBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,uCAAuC,CAAC,OAAO,CAAC,GACtD,OAAO,CAAC,OAAO,CAAC;IAgBnB;;;;;;;;;;;;;;;;;;;OAmBG;IACG,kBAAkB,CACtB,KAAK,EAAE,mCAAmC,CAAC,OAAO,CAAC,GAClD,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,SAAS,CAAC,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI;IAIvE,OAAO,CAAC,YAAY;CAQrB"}
+{"version":3,"file":"udp.d.ts","sourceRoot":"","sources":["../../src/domains/udp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAEL,KAAK,uBAAuB,EAG5B,KAAK,6BAA6B,EAElC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,+BAA+B,EAEpC,KAAK,gCAAgC,EAErC,KAAK,uCAAuC,EAE5C,KAAK,mCAAmC,EACzC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAa1D,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAG1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,MAAM;IAKf,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,OAAO,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,2BAA2B,CAAC;IAZtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA+B;gBAG1D,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,mBAAmB,EACzB,OAAO,CAAC,EAAE,eAAe,YAAA;IACjC;;;;OAIG;IACK,2BAA2B,CAAC,GAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,aAAA;IAGjF;;;;OAIG;IACG,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;YAKpC,uBAAuB;IAWrC,OAAO,CAAC,gBAAgB;IAOxB,mEAAmE;IACnE,OAAO,CAAC,MAAM;IAId;;;;OAIG;YACW,YAAY;IAoB1B;;;;;;;;;;;;;OAaG;IACG,OAAO,IAAI,OAAO,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IAkBpE;;;;;;;;OAQG;IACH;;;;;OAKG;IACH,UAAU,IAAI,IAAI;IAIZ,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IASpC;;;;;;;OAOG;IACG,gBAAgB,IAAI,OAAO,CAC/B,6BAA6B,CAAC,0BAA0B,CAAC,CAC1D;IAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;YAKL,mBAAmB;IAyCjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,eAAe,CACnB,KAAK,EAAE,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG;QACrE,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GACA,OAAO,CAAC,OAAO,CAAC;IAgBnB;;;;;;;;;;;;;;;;;;OAkBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG;QACrE,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,EACD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;;;;;;OAiBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;OAgBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;OAYG;IACG,cAAc,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE;YAAE,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,UAAU,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBnB;;;;;;;;;;;;;;;;;;;OAmBG;IACG,cAAc,CAClB,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,GAC9C,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;;;;;;OAiBG;IACG,qBAAqB,CACzB,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,EAC/C,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;;;;;;;OAkBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAU/B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,uCAAuC,CAAC,OAAO,CAAC,GACtD,OAAO,CAAC,OAAO,CAAC;IAgBnB;;;;;;;;;;;;;;;;;;;OAmBG;IACG,kBAAkB,CACtB,KAAK,EAAE,mCAAmC,CAAC,OAAO,CAAC,GAClD,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,SAAS,CAAC,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI;IAIvE,OAAO,CAAC,YAAY;CAQrB"}

package/dist/domains/udp.js

@@ -375,7 +375,11 @@ export class UdpAPI {
      *   - `chunk` — `{ x, y, z }` chunk address (signed int64 decimal strings).
      *   - `uuid` — 32-ASCII-character source id (typically the player; not
      *     RFC-4122).
-     *   - `audioData` — compressed audio, base64-encoded.
+     *   - `audioData` — compressed audio, base64-encoded. The platform never
+     *     inspects the bytes. Browser games should send G.711 µ-law, 8 kHz
+     *     mono, ~60 ms frames (480 bytes), with a wrapping `sequenceNumber`
+     *     so receivers can drop late/duplicate packets. See The Construct
+     *     `VoiceService` and Blocks with Friends `VoiceChat`.
      *   - `distance` — replication radius in chunk units, 0-8 (clamped); defaults
      *     to 1 for audio packets.
      *   - `decayRate` — decay algorithm 0-5 (see {@link sendActorUpdate});